3.5

CVE-2013-4022

EPSS 0.14%
Veröffentlicht 25.09.2013 10:31:29
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Data Studio Web Console Version3.1.0

Ibm ≫ Db2 Recovery Expert Version2.0

Ibm ≫ Infosphere Optim Configuration Manager Version2.0

Ibm ≫ Infosphere Optim Configuration Manager Version2.1

Ibm ≫ Optim Performance Manager Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.299

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N

http://www-01.ibm.com/support/docview.wss?uid=swg21650504

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/85928

https://nvd.nist.gov/vuln/detail/CVE-2013-4022

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4022

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4022

EUVD