VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 25, 2013· Updated Jun 16, 2026

CVE-2013-4025

CVE-2013-4025

Description

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Data Studio Web Console2 versions
    cpe:2.3:a:ibm:data_studio_web_console:3.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:data_studio_web_console:3.1.0:*:*:*:*:*:*:*
    • (no CPE)range: <3.2
  • IBM/Db2 Recovery Expert
    cpe:2.3:a:ibm:db2_recovery_expert:2.0:*:*:*:*:*:*:*
  • IBM/Infosphere Optim Configuration Manager3 versions
    cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_optim_configuration_manager:2.1:*:*:*:*:*:*:*
    • (no CPE)range: <2.2
  • IBM/Optim Performance Manager2 versions
    cpe:2.3:a:ibm:optim_performance_manager:5.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:optim_performance_manager:5.1.0:*:*:*:*:*:*:*
    • (no CPE)range: <5.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.