Information disclosure in Ibm Maximo Asset Management
CVE-2013-2998
frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid action_code.
Vulnerability class: Information Disclosure
EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Maximo_asset_management — versions 7.1, 7.1.1, 7.1.1.1
- Ibm Smartcloud_control_desk — versions 7.0, 7.5, 7.5.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)