Unscored severity · published Sep 25, 2013
CVE-2013-4024
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support…
–
CVSS
1.1%
EPSS
No
On KEV
Description
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Data Studio Web Console · Ibm
3.1.0 · source: NVD
DR
Db2 Recovery Expert · Ibm
2.0 · source: NVD
IO
Infosphere Optim Configuration Manager · Ibm
2.0; 2.1 · source: NVD
OP
Optim Performance Manager · Ibm
5.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4024
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21650504
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85931
More from Data Studio Web Console
–
CVE-2013-4025
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not…
–
CVE-2013-4022
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store…