NVD

Id
39711  
Name
CVE-2013-4022  
Description
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-09-25  
Modified Date
2013-10-15  
Seq
2013-4022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202025 39711 CVE-2013-4022 http://www-01.ibm.com/support/docview.wss?uid=swg21650504  View
202026 39711 CVE-2013-4022 datastudio-cve20134022-info-disclosure(85928)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22733 JVNDB-2013-004308 複数の IBM 製品におけるアクセス制限を回避される脆弱性 複数の IBM 製品は、Cookie に不特定の認証情報を格納するため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-4022 63964 CVE-2013-4022 39711 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004308.html 2013-09-23 2013-09-26 View