NetSight
medium4.3

CVE-2015-5051

IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2…

Impact

IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query results via unspecified vectors.

Affected products

VendorProductAffected versions
IbmMaximo Asset Management
Versions 7.5, 7.6
IbmMaximo Asset Management Essentials
Versions 7.5, 7.6
IbmMaximo For Government
Version 7.5
IbmMaximo For Life Sciences
Versions 7.5, 7.6
IbmMaximo For Nuclear Power
Version 7.5
IbmMaximo For Oil And Gas
Version 7.5
IbmMaximo For Transportation
Version 7.5
IbmMaximo For Utilities
Version 7.5
IbmSmartcloud Control Desk
Versions 7.5, 7.6

Weakness classification

References