medium6.5
CVE-2012-6355
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service…
Impact
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | Versions 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5 |
| Ibm | Maximo Asset Management Essentials | Versions 6.2.0.0, 7.5.0.0 |
| Ibm | Tivoli Asset Management For It | Versions 6.0, 6.2, 7.0, 7.1, 7.2 |
| Ibm | Tivoli Service Request Manager | Versions 7.1.0, 7.1.0.0, 7.2.0.0 |
| Ibm | Maximo Service Desk | Version 6.2 |
| Ibm | Change And Configuration Management Database | Versions 7.1., 7.2.0 |
| Ibm | Smartcloud Control Desk | Version 7.5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80747
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80747