Lucene search

[email protected]CVE-2013-6741

HistoryMay 26, 2014 - 4:55 p.m.

CVE-2013-6741

2014-05-2616:55:00

CWE-200

[email protected]

web.nvd.nist.gov

ibm

maximo asset management

smartcloud control desk

tivoli it asset management

tivoli service request manager

maximo service desk

change and configuration management database

cve-2013-6741

stack-trace

remote authentication

information security

vulnerability

6 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

46.1%

JSON

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837 allow remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error.

CPENameOperatorVersion
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.5
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.7
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.2
ibm:maximo_asset_managementibm maximo asset managementeq7.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.6
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.1
ibm:change_and_configuration_management_databaseibm change and configuration management databaseeq7.1.1.7
ibm:tivoli_asset_management_for_itibm tivoli asset management for iteq7.0
ibm:tivoli_it_asset_management_for_itibm tivoli it asset management for iteq7.1.1.7

CPE	Name	Operator	Version
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.5
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.7
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.2
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.6
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.1
ibm:change_and_configuration_management_database	ibm change and configuration management database	eq	7.1.1.7
ibm:tivoli_asset_management_for_it	ibm tivoli asset management for it	eq	7.0
ibm:tivoli_it_asset_management_for_it	ibm tivoli it asset management for it	eq	7.1.1.7

Rows per page:

1-10 of 271

References

www-01.ibm.com/support/docview.wss?uid=swg1IV50316

www-01.ibm.com/support/docview.wss?uid=swg21670870

exchange.xforce.ibmcloud.com/vulnerabilities/89857

6 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

46.1%

JSON

Related for CVE-2013-6741

prion1 cvelist1 ibm1