Unscored severity · published Sep 25, 2013
CVE-2013-4022
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store…
–
CVSS
0.9%
EPSS
No
On KEV
Description
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Data Studio Web Console · Ibm
3.1.0 · source: NVD
DR
Db2 Recovery Expert · Ibm
2.0 · source: NVD
IO
Infosphere Optim Configuration Manager · Ibm
2.0; 2.1 · source: NVD
OP
Optim Performance Manager · Ibm
5.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4022
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21650504
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85928
More from Data Studio Web Console
–
CVE-2013-4025
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not…
–
CVE-2013-4024
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support…