CVE-2013-4025

no score yetEPSS 0.5%

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2013-09-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:data_studio_web_console
ibm:db2_recovery_expert
ibm:infosphere_optim_configuration_manager
ibm:optim_performance_manager

References

http://www-01.ibm.com/support/docview.wss?uid=swg21650504
https://exchange.xforce.ibmcloud.com/vulnerabilities/85933
http://www-01.ibm.com/support/docview.wss?uid=swg21650504
https://exchange.xforce.ibmcloud.com/vulnerabilities/85933

Check your stack JSON