Lucene search

K
cve[email protected]CVE-2013-5464
HistoryMay 26, 2014 - 4:55 p.m.

CVE-2013-5464

2014-05-2616:55:02
CWE-264
web.nvd.nist.gov
19
ibm
maximo asset management
smartcloud control desk
cve-2013-5464
nvd
access restrictions
remote authenticated users
physical counts

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated with restricted storerooms, via unspecified vectors.

Affected configurations

NVD
Node
ibmmaximo_asset_managementMatch7.5.0.0
OR
ibmmaximo_asset_managementMatch7.5.0.1
OR
ibmmaximo_asset_managementMatch7.5.0.2
OR
ibmmaximo_asset_managementMatch7.5.0.3
OR
ibmmaximo_asset_managementMatch7.5.0.4
OR
ibmmaximo_asset_managementMatch7.5.0.5
Node
ibmsmartcloud_control_deskMatch7.0
OR
ibmsmartcloud_control_deskMatch7.5
OR
ibmsmartcloud_control_deskMatch7.5.0.0
OR
ibmsmartcloud_control_deskMatch7.5.0.1
OR
ibmsmartcloud_control_deskMatch7.5.0.2
OR
ibmsmartcloud_control_deskMatch7.5.1.0
OR
ibmsmartcloud_control_deskMatch7.5.1.1

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

5.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.7%

Related for CVE-2013-5464