NetSight
IP …
low3.5

CVE-2013-6741

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x bef…

Impact

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837 allow remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error.

Affected products

VendorProductAffected versions
IbmMaximo Asset Management
Versions 7.1, 7.1.1, 7.1.1.1, 7.1.1.2, 7.1.1.5, 7.1.1.6
IbmChange And Configuration Management Database
Version 7.1.1.7
IbmMaximo Service Desk
Version 7.1.1.7
IbmTivoli Asset Management For It
Versions 7.0, 7.1
IbmTivoli It Asset Management For It
Version 7.1.1.7
IbmTivoli Service Request Manager
Versions 7.1.1, 7.1.1.7
IbmSmartcloud Control Desk
Versions 7.0, 7.5, 7.5.0.0, 7.5.0.1, 7.5.0.2, 7.5.1.0

Weakness classification

CWE-200

References