CVE-2013-4022

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.

CVSS v2.0 3.5 LOW

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21650504	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/85928
http://www-01.ibm.com/support/docview.wss?uid=swg21650504	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/85928

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:data_studio_web_console:3.1.0:::::::*
	cpe:2.3:a:ibm:db2_recovery_expert:2.0:::::::*
	cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.0:::::::*
	cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.1:::::::*
	cpe:2.3:a:ibm:optim_performance_manager:5.1.0:::::::*

History

21 Nov 2024, 01:54

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21650504 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21650504 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/85928 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/85928 -

Information

Published : 2013-09-25 10:31

Updated : 2024-11-21 01:54

NVD link : CVE-2013-4022

Mitre link : CVE-2013-4022

CVE.ORG link : CVE-2013-4022

JSON object : View

Products Affected

ibm

optim_performance_manager
data_studio_web_console
infosphere_optim_configuration_manager
db2_recovery_expert

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2013-4022", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-09-25T10:31:29.113", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21650504", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85928", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21650504", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85928", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors."}, {"lang": "es", "value": "IBM Data Studio Web Console v3.x anterior a v3.2, Optim Performance Manager v5.x anterior a v5.2, InfoSphere Optim Configuration Manager v2.x anterior a v2.2 y DB2 Recovery Expert v2.x almacenan informaci\u00f3n de autenticaci\u00f3n de usuarios no especificada en una cookie, lo que permite a usuarios autenticados remotamente evitar las restricciones de acceso establecidas a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:54:43.697", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:data_studio_web_console:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BCEE551-BA38-45A1-90CC-DD442D3FD78A"}, {"criteria": "cpe:2.3:a:ibm:db2_recovery_expert:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65BFFDB7-6A9C-433B-9C54-ADBB12954631"}, {"criteria": "cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09177EE3-A02A-40D0-A404-BE86F64570DB"}, {"criteria": "cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF854DBF-2280-46D1-A5C7-DD9185C157A1"}, {"criteria": "cpe:2.3:a:ibm:optim_performance_manager:5.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DB2A0D8-0D0E-4D1E-BB6A-790D34AA6985"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}