CVE-2013-4025

NIEDRIG 1.9CVE-2013-4025 · Published 25/09/2013 · updated 16/06/2026

Kurz gesagt

CVE-2013-4025 ist eine Schwachstelle (NIEDRIG (CVSS 1.9)) in data studio web console (ibm), db2 recovery expert (ibm), infosphere optim configuration manager (ibm).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.48%, höher als bei 41.4% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
data studio web console ibm	`= 3.1.0`	No fix yet
db2 recovery expert ibm	`= 2.0`	No fix yet
infosphere optim configuration manager ibm	`= 2.0= 2.1`	No fix yet
optim performance manager ibm	`= 5.1.0`	No fix yet

Description

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/85933

Weitere Schwachstellen in data studio web console

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free