CVE-2013-4022

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access...

PT-2013-4797

Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue allows remote...

PT-2013-4798

Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue allows remote attackers...

PT-2013-4799

Name of the Vulnerable Software and Affected Versions IBM Data Studio Web Console versions 3.x before 3.2 Optim Performance Manager versions 5.x before 5.2 InfoSphere Optim Configuration Manager versions 2.x before 2.2 DB2 Recovery Expert versions 2.x Description The issue makes it easier for...

CVE-2013-4024: Exposure of Sensitive Information to an Unauthorized Actor

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network...

CVE-2013-4022: Undefined Security Weakness

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access...

CVE-2013-4025: Undefined Security Weakness

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain...

IBM DB2 Content Manager eClient < 8.4.1.1 Unspecified Security Vulnerability

According to its version number, the IBM DB2 Content Manager eClient install hosted on the remote web server is a version prior to 8.4.1.1, and is, therefore, potentially affected by an unspecified security vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

IBM DB2 Content Manager eClient Detection

The remote web server hosts IBM DB2 Content Manager eClient, a web- based content management application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70074; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"IBM DB2 Content Manager eClient...

IBM DB2 10.5 < Fix Pack 1 Security Bypass

According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by a security bypass vulnerability. An unspecified error exists that can allow an attacker to gain SELECT, INSERT, UPDATE, or DELETE permissions to database tables. Note that successful exploitation...

IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability

IBM Db2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability - Linux

IBM DB2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

IBM Db2 Audit Facility Local Privilege Escalation Vulnerability - Linux

IBM Db2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

CVE-2013-4033

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority...

Code injection

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority...

CVE-2013-4033

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority...

CVE-2013-4033

CVE-2013-4033 affects IBM DB2 and DB2 Connect (versions 9.7 FP8, 9.8 FP5, 10.1 FP2, 10.5 FP1). An authenticated user with EXPLAIN authority can temporarily gain SELECT/INSERT/UPDATE/DELETE on a table without DATAACCESS authority, by exploiting EXPLAIN-related privileges. IBM security notices list...

PT-2013-4803

Name of the Vulnerable Software and Affected Versions IBM DB2 and DB2 Connect versions 9.7 through FP8 IBM DB2 and DB2 Connect versions 9.8 through FP5 IBM DB2 and DB2 Connect versions 10.1 through FP2 IBM DB2 and DB2 Connect versions 10.5 through FP1 Description The issue allows remote...

CVE-2013-4033: Undefined Security Weakness

IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority...

Fedora Update for WebCalendar FEDORA-2013-13484

Check for the Version of WebCalendar OpenVAS Vulnerability Test Fedora Update for WebCalendar FEDORA-2013-13484 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...