CVE-2013-4024

MEDIUM 4.3CVE-2013-4024 · Published 25/09/2013 · updated 16/06/2026

In short

CVE-2013-4024 is a MEDIUM (CVSS 4.3) vulnerability affecting data studio web console (ibm), db2 recovery expert (ibm), infosphere optim configuration manager (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
data studio web console ibm	`= 3.1.0`	No fix yet
db2 recovery expert ibm	`= 2.0`	No fix yet
infosphere optim configuration manager ibm	`= 2.0= 2.1`	No fix yet
optim performance manager ibm	`= 5.1.0`	No fix yet

Description

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/85931

More vulnerabilities in data studio web console

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free