CVE-2013-4022: Undefined Security Weakness

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access...

PT-2013-4798

Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue allows remote attackers...

CVE-2013-4025: Undefined Security Weakness

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain...

CVE-2013-2981

Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-2980

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

Directory traversal

Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

CVE-2013-2981

Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-2981

CVE-2013-2981 affects IBM Data Studio Web Console versions 3.1.0 and 3.1.1. A directory traversal vulnerability allows a remote attacker who has authenticated to the web application to read arbitrary files from the server filesystem. The root cause is improper validation of file paths in the Web ...

CVE-2013-2980

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

CVE-2013-2980

CVE-2013-2980 affects IBM Data Studio Web Console 3.1.0/3.1.1. A cross-site request forgery (CSRF) vulnerability arises from improper validation of browser request headers, allowing an authenticated user to be persuaded to visit a malicious site and cause access to sensitive monitored database in...

PT-2013-4076

Name of the Vulnerable Software and Affected Versions IBM Data Studio versions 3.1.0 through 3.1.1 Description A directory traversal issue in the Web Console of IBM Data Studio allows remote attackers to read arbitrary files. Recommendations For versions 3.1.0 and 3.1.1, update to a version that...

CVE-2013-2981: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2013-4075

Name of the Vulnerable Software and Affected Versions IBM Data Studio versions 3.1.0 through 3.1.1 Description A cross-site request forgery issue in the Web Console allows remote attackers to hijack user authentication for requests accessing monitored database information. Recommendations For IBM...

CVE-2013-2980: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

IBM Data Studio Detection

The remote host has IBM Data Studio installed, a database development environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65575; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/07/17"; scriptnameenglish:"IBM Data Studio...

IBM Data Studio 3.1 / 3.1.1 Help System Multiple Vulnerabilities

The remote host has a version of IBM Data Studio installed that is affected by multiple vulnerabilities : - An unspecified open-redirect vulnerability exists in the Eclipse help system components. CVE-2012-2159 - An unspecified cross-site scripting vulnerability exists in the Eclipse help system...

CVE-2013-0467

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...

CVE-2013-0467

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...

CVE-2013-0467: Undefined Security Weakness

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...