CVE-2013-4022

CWE-2553 documents3 sources
Severity
3.5LOW
EPSS
0.1%
top 66.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
IBM Data Studio WEB ConsoleIBM DB2 Recovery ExpertIBM Infosphere Optim Configuration Manager+1 more
Timeline
PublishedSep 25
Latest updateMay 17

Description

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages4 packages

🔴Vulnerability Details

2
GHSA
GHSA-gr95-2p5v-jmcg: IBM Data Studio Web Console 3↗2022-05-17
▶
CVEList
CVE-2013-4022: IBM Data Studio Web Console 3↗2013-09-25
▶
CVE-2013-4022 (LOW CVSS 3.5) | IBM Data Studio Web Console 3.x bef | cvebase.io