5 results (0.034 seconds)

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2014-6154

https://notcve.org/view.php?id=CVE-2014-6154

Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL. Vulnerabilidad de salto de directorio en IBM Optim Performance Manager para DB2 4.1.0.1 hasta 4.1.1 en Linux, UNIX, y Windows e IBM InfoSphere Optim Performance Manager para DB2 5.1 hasta 5.3.1 en Linux, UNIX, y Windows permite a atacantes remotos acceder a ficheros arbitrarios a través de un .. (punto punto) en una URL. • http://www-01.ibm.com/support/docview.wss?uid=swg21696000 https://exchange.xforce.ibmcloud.com/vulnerabilities/97677 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0

CVE-2013-4024

https://notcve.org/view.php?id=CVE-2013-4024

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network. IBM Data Studio Web Console 3.x anterior a la versión 3,2, Optim Performance Manager 5.x anterior a la versión 5.2, InfoSphere Optim Configuration Manager 2.x anterior a la versión 2.2, y DB2 Recovery Expert 2.x soporta HTTP en la Web Console, lo que permite a atacantes remotos leer cookies de sesión mediante la captura de tráfico de red. • http://www-01.ibm.com/support/docview.wss?uid=swg21650504 https://exchange.xforce.ibmcloud.com/vulnerabilities/85931 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 3.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2013-4022

https://notcve.org/view.php?id=CVE-2013-4022

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors. IBM Data Studio Web Console v3.x anterior a v3.2, Optim Performance Manager v5.x anterior a v5.2, InfoSphere Optim Configuration Manager v2.x anterior a v2.2 y DB2 Recovery Expert v2.x almacenan información de autenticación de usuarios no especificada en una cookie, lo que permite a usuarios autenticados remotamente evitar las restricciones de acceso establecidas a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg21650504 https://exchange.xforce.ibmcloud.com/vulnerabilities/85928 • CWE-255: Credentials Management Errors •

CVSS: 1.9EPSS: 0%CPEs: 5EXPL: 0

CVE-2013-4025

https://notcve.org/view.php?id=CVE-2013-4025

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. IBM Data Studio Web Console 3.x anterior a la versión 3.2, Optim Performance Manager 5.x anterior a la versión 5.2, InfoSphere Optim Configuration Manager 2.x anterior a la versión 2.2, y DB2 Recovery Expert 2.x no tienen un atributo para desactivar el autocompletado en el campo usuario-contraseña, lo que permite fácilmente a atacantes remotos obtener acceso mediante el aprovechamiento de una estación de trabajo sin supervisión. • http://www-01.ibm.com/support/docview.wss?uid=swg21650504 https://exchange.xforce.ibmcloud.com/vulnerabilities/85933 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 4.0EPSS: 0%CPEs: 4EXPL: 0

CVE-2013-2979

https://notcve.org/view.php?id=CVE-2013-2979

Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL. Vulnerabilidad de salto de directorio en IBM Optim Performance Manager 4.1.1 e IBM InfoSphere Optim Performance Manager 5.x anterior a 5.2 permite a usuarios autenticados remotamente leer archivos arbitrarios a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg21647415 https://exchange.xforce.ibmcloud.com/vulnerabilities/83972 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •