medium4.3
CVE-2015-7452
IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3…
Impact
IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive information via the REST API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | Versions 7.5, 7.6 |
| Ibm | Maximo Asset Management Essentials | Version 7.5 |
| Ibm | Maximo For Government | Version 7.5 |
| Ibm | Maximo For Life Sciences | Versions 7.5, 7.6 |
| Ibm | Maximo For Nuclear Power | Version 7.5 |
| Ibm | Maximo For Oil And Gas | Version 7.5 |
| Ibm | Maximo For Transportation | Version 7.5 |
| Ibm | Maximo For Utilities | Version 7.5 |
| Ibm | Smartcloud Control Desk | Versions 7.5, 7.6 |