Lucene search

K
cveIbmCVE-2012-6356
HistoryFeb 20, 2013 - 12:09 p.m.

CVE-2012-6356

2013-02-2012:09:22
CWE-264
ibm
web.nvd.nist.gov
31
ibm
maximo asset management
smartcloud control desk
cve-2012-6356
import operation
security vulnerability

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

59.6%

IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation.

Affected configurations

Nvd
Node
ibmmaximo_asset_managementMatch7.5.0.0
OR
ibmmaximo_asset_management_essentialsMatch7.5.0.0
OR
ibmsmartcloud_control_deskMatch7.5.0.0
VendorProductVersionCPE
ibmmaximo_asset_management7.5.0.0cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*
ibmmaximo_asset_management_essentials7.5.0.0cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*
ibmsmartcloud_control_desk7.5.0.0cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

59.6%

Related for CVE-2012-6356