Vulnerability in Ibm Maximo Asset Management

CVE-2013-5460

IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors.

EPSS: 0.010 (60.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Maximo_asset_management — versions 7.1, 7.1.1, 7.1.1.1
Ibm Smartcloud_control_desk — versions 7.0, 7.5, 7.5.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)