Unscored severity · published Sep 25, 2013
CVE-2013-4025
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not…
–
CVSS
0.5%
EPSS
No
On KEV
Description
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Data Studio Web Console · Ibm
3.1.0 · source: NVD
DR
Db2 Recovery Expert · Ibm
2.0 · source: NVD
IO
Infosphere Optim Configuration Manager · Ibm
2.0; 2.1 · source: NVD
OP
Optim Performance Manager · Ibm
5.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4025
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4025
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21650504
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85933
More from Data Studio Web Console
–
CVE-2013-4024
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support…
–
CVE-2013-4022
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store…