cbcvebase.
CVE-2013-4022
published 2013-09-25

CVE-2013-4022: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery…

low3.5CVSS 3.1
AVNACMAuSCPINAN
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.

Affected

5 ranges
VendorProductVersion rangeFixed in
ibmdata_studio_web_console
ibmdb2_recovery_expert
ibminfosphere_optim_configuration_manager
ibminfosphere_optim_configuration_manager
ibmoptim_performance_manager