critical9.8

CVE-2013-3323

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure …

Impact

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Affected products

Vendor	Product	Affected versions
Ibm	Change And Configuration Management Database	Versions 7.1, 7.2
Ibm	Maximo Asset Management	Versions 6.2, 7.1, 7.5
Ibm	Maximo Asset Management Essentials	Versions 6.2, 7.1, 7.5
Ibm	Maximo For Government	Versions 6.2, 7.1, 7.5
Ibm	Maximo For Life Sciences	Versions 6.2, 6.4, 6.5, 7.1, 7.5
Ibm	Maximo For Nuclear Power	Versions 6.2, 6.3, 7.1, 7.5
Ibm	Maximo For Oil And Gas	Versions 6.2, 6.3, 6.4, 7.1, 7.5
Ibm	Maximo For Transportation	Versions 6.2, 6.3, 7.1, 7.5
Ibm	Maximo For Utilities	Versions 6.2, 6.3, 7.1, 7.5
Ibm	Maximo Service Desk	Version 6.2
Ibm	Smartcloud Control Desk	Version 7.5
Ibm	Tivoli Asset Management For It	Versions 6.2, 7.1, 7.2

Weakness classification

CWE-269

Impact

Affected products

Weakness classification

References