Lucene search

[email protected]CVE-2015-7395

HistoryNov 08, 2015 - 3:59 a.m.

CVE-2015-7395

2015-11-0803:59:00

CWE-284

[email protected]

web.nvd.nist.gov

ibm

maximo asset management

smartcloud control desk

vulnerability

bypass

work-order

remote authenticated users

nvd

6.3 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

30.1%

JSON

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 FP002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended work-order change restrictions via unspecified vectors.

CPENameOperatorVersion
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.8
ibm:maximo_for_nuclear_poweribm maximo for nuclear powereq7.5.0.2
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.13
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.5
ibm:maximo_for_utilitiesibm maximo for utilitieseq7.5.0.4
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.5
ibm:maximo_for_utilitiesibm maximo for utilitieseq7.1
ibm:maximo_for_life_sciencesibm maximo for life scienceseq7.5.0.0
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.7
ibm:maximo_for_life_sciencesibm maximo for life scienceseq7.5.0.3

CPE	Name	Operator	Version
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.8
ibm:maximo_for_nuclear_power	ibm maximo for nuclear power	eq	7.5.0.2
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.13
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.5
ibm:maximo_for_utilities	ibm maximo for utilities	eq	7.5.0.4
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.5
ibm:maximo_for_utilities	ibm maximo for utilities	eq	7.1
ibm:maximo_for_life_sciences	ibm maximo for life sciences	eq	7.5.0.0
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.7
ibm:maximo_for_life_sciences	ibm maximo for life sciences	eq	7.5.0.3

Rows per page:

1-10 of 821

References

www-01.ibm.com/support/docview.wss?uid=swg21969072

6.3 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

30.1%

JSON

Related for CVE-2015-7395

cvelist1 prion1 ibm1