CVE-2013-4025

LOW 1.9CVE-2013-4025 · Published 25/09/2013 · updated 16/06/2026

In short

CVE-2013-4025 is a LOW (CVSS 1.9) vulnerability affecting data studio web console (ibm), db2 recovery expert (ibm), infosphere optim configuration manager (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
data studio web console ibm	`= 3.1.0`	No fix yet
db2 recovery expert ibm	`= 2.0`	No fix yet
infosphere optim configuration manager ibm	`= 2.0= 2.1`	No fix yet
optim performance manager ibm	`= 5.1.0`	No fix yet

Description

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/85933

More vulnerabilities in data studio web console

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free