VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 25, 2013· Updated Jun 16, 2026

CVE-2013-4024

CVE-2013-4024

Description

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Data Studio Web Console2 versions
    cpe:2.3:a:ibm:data_studio_web_console:3.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:data_studio_web_console:3.1.0:*:*:*:*:*:*:*
    • (no CPE)range: >=3.0, <3.2
  • IBM/Db2 Recovery Expert
    cpe:2.3:a:ibm:db2_recovery_expert:2.0:*:*:*:*:*:*:*
  • IBM/Infosphere Optim Configuration Manager3 versions
    cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.1:*:*:*:*:*:*:*
    • (no CPE)range: >=2.0, <2.2
  • IBM/Optim Performance Manager2 versions
    cpe:2.3:a:ibm:optim_performance_manager:5.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:optim_performance_manager:5.1.0:*:*:*:*:*:*:*
    • (no CPE)range: >=5.0, <5.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.