CVE-2013-4025

EPSS 0.08%
Veröffentlicht 25.09.2013 10:31:29
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Data Studio Web Console Version3.1.0

Ibm ≫ Db2 Recovery Expert Version2.0

Ibm ≫ Infosphere Optim Configuration Manager Version2.0

Ibm ≫ Infosphere Optim Configuration Manager Version2.1

Ibm ≫ Optim Performance Manager Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.202

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	1.9	3.4	2.9	AV:L/AC:M/Au:N/C:P/I:N/A:N

http://www-01.ibm.com/support/docview.wss?uid=swg21650504

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/85933

https://nvd.nist.gov/vuln/detail/CVE-2013-4025

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4025

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4025

EUVD