Design/Logic Flaw

2014-05-2616:55:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.6%

JSON

IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors.

CPENameOperatorVersion
maximo_asset_managementeq7.5.0.5
maximo_asset_managementeq7.1.1.5
maximo_asset_managementeq7.1.1.7
maximo_asset_managementeq7.1.1.10
maximo_asset_managementeq7.1.1.8
maximo_asset_managementeq7.5.0.4
maximo_asset_managementeq7.1.1.12
maximo_asset_managementeq7.1.1.9
maximo_asset_managementeq7.1.1.2
maximo_asset_managementeq7.5.0.1

Name	Operator	Version
maximo_asset_management	eq	7.5.0.5
maximo_asset_management	eq	7.1.1.5
maximo_asset_management	eq	7.1.1.7
maximo_asset_management	eq	7.1.1.10
maximo_asset_management	eq	7.1.1.8
maximo_asset_management	eq	7.5.0.4
maximo_asset_management	eq	7.1.1.12
maximo_asset_management	eq	7.1.1.9
maximo_asset_management	eq	7.1.1.2
maximo_asset_management	eq	7.5.0.1