low3.5
CVE-2013-5460
IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to by…
Impact
IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | Versions 7.1, 7.1.1, 7.1.1.1, 7.1.1.2, 7.1.1.5, 7.1.1.6 |
| Ibm | Smartcloud Control Desk | Versions 7.0, 7.5, 7.5.0.0, 7.5.0.1, 7.5.0.2, 7.5.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV46745
- http://www-01.ibm.com/support/docview.wss?uid=swg21670870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88308
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV46745
- http://www-01.ibm.com/support/docview.wss?uid=swg21670870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88308