CVE-2013-4024

EUVD-2013-3955
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
ibmdata_studio_web_console
3.1.0
ibmdb2_recovery_expert
2.0
ibminfosphere_optim_configuration_manager
2.0
ibminfosphere_optim_configuration_manager
2.1
ibmoptim_performance_manager
5.1.0
𝑥
= Vulnerable software versions