Design/Logic Flaw

2014-05-2616:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.6%

JSON

IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated with restricted storerooms, via unspecified vectors.

CPENameOperatorVersion
maximo_asset_managementeq7.5.0.5
maximo_asset_managementeq7.5.0.4
maximo_asset_managementeq7.5.0.1
maximo_asset_managementeq7.5.0.2
maximo_asset_managementeq7.5.0.0
maximo_asset_managementeq7.5.0.3
smartcloud_control_deskeq7.5.1.0
smartcloud_control_deskeq7.5
smartcloud_control_deskeq7.0
smartcloud_control_deskeq7.5.0.1

Name	Operator	Version
maximo_asset_management	eq	7.5.0.5
maximo_asset_management	eq	7.5.0.4
maximo_asset_management	eq	7.5.0.1
maximo_asset_management	eq	7.5.0.2
maximo_asset_management	eq	7.5.0.0
maximo_asset_management	eq	7.5.0.3
smartcloud_control_desk	eq	7.5.1.0
smartcloud_control_desk	eq	7.5
smartcloud_control_desk	eq	7.0
smartcloud_control_desk	eq	7.5.0.1