Vulnerability in IBM Maximo Asset Management

CVE-2014-0849

IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups.

EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Maximo_asset_management — versions 7.1, 7.1.1, 7.1.1.1
Ibm Smartcloud_control_desk — versions 7.0, 7.5, 7.5.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (x_refsource_CONFIRM)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)