CVE-2013-3323 A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session,...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm change and configuration management database | = 7.1 | No fix listed |
| ibm change and configuration management database | = 7.2 | No fix listed |
| ibm maximo asset management | = 6.2 | No fix listed |
| ibm maximo asset management | = 7.1 | No fix listed |
| ibm maximo asset management | = 7.5 | No fix listed |
| ibm maximo asset management essentials | = 6.2 | No fix listed |
| ibm maximo asset management essentials | = 7.1 | No fix listed |
| ibm maximo asset management essentials | = 7.5 | No fix listed |
| ibm maximo for government | = 6.2 | No fix listed |
| ibm maximo for government | = 7.1 | No fix listed |
| ibm maximo for government | = 7.5 | No fix listed |
| ibm maximo for life sciences | = 6.2 | No fix listed |
| ibm maximo for life sciences | = 6.4 | No fix listed |
| ibm maximo for life sciences | = 6.5 | No fix listed |
| ibm maximo for life sciences | = 7.1 | No fix listed |
| ibm maximo for life sciences | = 7.5 | No fix listed |
| ibm maximo for nuclear power | = 6.2 | No fix listed |
| ibm maximo for nuclear power | = 6.3 | No fix listed |
| ibm maximo for nuclear power | = 7.1 | No fix listed |
| ibm maximo for nuclear power | = 7.5 | No fix listed |
| ibm maximo for oil and gas | = 6.2 | No fix listed |
| ibm maximo for oil and gas | = 6.3 | No fix listed |
| ibm maximo for oil and gas | = 6.4 | No fix listed |
| ibm maximo for oil and gas | = 7.1 | No fix listed |
| ibm maximo for oil and gas | = 7.5 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm maximo for transportation | = 6.2 | No fix listed |
| ibm maximo for transportation | = 6.3 | No fix listed |
| ibm maximo for transportation | = 7.1 | No fix listed |
| ibm maximo for transportation | = 7.5 | No fix listed |
| ibm maximo for utilities | = 6.2 | No fix listed |
| ibm maximo for utilities | = 6.3 | No fix listed |
| ibm maximo for utilities | = 7.1 | No fix listed |
| ibm maximo for utilities | = 7.5 | No fix listed |
| ibm maximo service desk | = 6.2 | No fix listed |
| ibm smartcloud control desk | = 7.5 | No fix listed |
| ibm tivoli asset management for it | = 6.2 | No fix listed |
| ibm tivoli asset management for it | = 7.1 | No fix listed |
| ibm tivoli asset management for it | = 7.2 | No fix listed |
| ibm tivoli service request manager | = 7.1 | No fix listed |
| ibm tivoli service request manager | = 7.2 | No fix listed |
References
- www.securityfocus.com third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry vendor-advisory
- www.ibm.com vendor-advisory