284 matches found
CVE-2013-4024
CVE-2013-4024 affects IBM Data Studio Web Console (3.x before 3.2), Optim Performance Manager (5.x before 5.2), InfoSphere Optim Configuration Manager (2.x before 2.2), and DB2 Recovery Expert (2.x). The issue arises from the Web Console serving over HTTP, allowing remote attackers to read sessio...
CVE-2013-4025
CVE-2013-4025 affects IBM Data Studio Web Console (3.x before 3.2), Optim Performance Manager (5.x before 5.2), InfoSphere Optim Configuration Manager (2.x before 2.2), and DB2 Recovery Expert (2.x). The root cause is lack of an off autocomplete attribute on the login-password field, enabling an ...
PT-2013-4797
Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue allows remote...
PT-2013-4799
Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue makes it easier for...
PT-2013-4798
Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue allows remote attackers...
CVE-2013-4022: Undefined Security Weakness
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access...
CVE-2013-4025: Undefined Security Weakness
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain...
CVE-2013-4024: Exposure of Sensitive Information to an Unauthorized Actor
IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network...
Directory traversal
Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL...
CVE-2013-2979
Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL...
CVE-2013-2979
CVE-2013-2979 is a directory traversal vulnerability in IBM Optim Performance Manager (OPM) for DB2, affecting IBM 4.1.0–4.1.1 and 5.1–5.1.1.x. A remotely authenticated attacker could craft a URL to traverse directories and read sensitive files outside the installation directory if the server pro...
PT-2013-4074
Name of the Vulnerable Software and Affected Versions IBM Optim Performance Manager version 4.1.1 IBM InfoSphere Optim Performance Manager versions prior to 5.2 Description The issue allows remote authenticated users to read arbitrary files via a crafted URL, specifically due to a directory...
CVE-2013-2979: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim Performance Manager 5.x before 5.2 allows remote authenticated users to read arbitrary files via a crafted URL...
HP OpenView Performance Manager 9.0 File Upload
File upload vulnerability in HP OpenView Performance Manager PMParamHandler Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
HP Performance Manager security vulnerabilities
DoS, code execution...
HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PMParamHandler component of Performance Manager, which is served v...
[security bulletin] HPSBMU02756 SSRT100596 rev.1 - HP Performance Manager Running on HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03255321 Version: 1 HPSBMU02756 SSRT100596 rev.1 - HP Performance Manager Running on HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code, Denial of Service DoS NOTICE: The...
Code injection
Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors...
