Lucene search

K
cve[email protected]CVE-2012-6355
HistoryFeb 20, 2013 - 12:09 p.m.

CVE-2012-6355

2013-02-2012:09:22
CWE-264
web.nvd.nist.gov
19
ibm maximo asset management
tivoli service request manager
smartcloud control desk
cve-2012-6355
nvd
security vulnerability
privilege escalation

6.6 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

59.5%

IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.

Affected configurations

NVD
Node
ibmmaximo_asset_managementMatch6.2
OR
ibmmaximo_asset_managementMatch6.2.1
OR
ibmmaximo_asset_managementMatch6.2.2
OR
ibmmaximo_asset_managementMatch6.2.3
OR
ibmmaximo_asset_managementMatch6.2.4
OR
ibmmaximo_asset_managementMatch6.2.5
OR
ibmmaximo_asset_managementMatch6.2.6
OR
ibmmaximo_asset_managementMatch6.2.6.1
OR
ibmmaximo_asset_managementMatch6.2.7
OR
ibmmaximo_asset_managementMatch6.2.8
OR
ibmmaximo_asset_managementMatch7.1.1
OR
ibmmaximo_asset_managementMatch7.1.1.1
OR
ibmmaximo_asset_managementMatch7.1.1.2
OR
ibmmaximo_asset_managementMatch7.1.1.5
OR
ibmmaximo_asset_managementMatch7.1.1.6
OR
ibmmaximo_asset_managementMatch7.1.1.7
OR
ibmmaximo_asset_managementMatch7.1.1.8
OR
ibmmaximo_asset_managementMatch7.1.1.9
OR
ibmmaximo_asset_managementMatch7.1.1.10
OR
ibmmaximo_asset_managementMatch7.1.1.11
OR
ibmmaximo_asset_managementMatch7.5.0.0
Node
ibmmaximo_asset_management_essentialsMatch6.2.0.0
OR
ibmmaximo_asset_management_essentialsMatch7.5.0.0
Node
ibmtivoli_asset_management_for_itMatch6.0
OR
ibmtivoli_asset_management_for_itMatch6.2
OR
ibmtivoli_asset_management_for_itMatch7.0
OR
ibmtivoli_asset_management_for_itMatch7.1
OR
ibmtivoli_asset_management_for_itMatch7.2
Node
ibmtivoli_service_request_managerMatch7.1.0
OR
ibmtivoli_service_request_managerMatch7.1.0.0
OR
ibmtivoli_service_request_managerMatch7.2.0.0
Node
ibmmaximo_service_deskMatch6.2
Node
ibmchange_and_configuration_management_databaseMatch7.1.
OR
ibmchange_and_configuration_management_databaseMatch7.2.0
Node
ibmsmartcloud_control_deskMatch7.5.0.0

6.6 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

59.5%

Related for CVE-2012-6355