CVE-2015-5016 IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allo...
MediumCVSS 4.3
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm maximo asset management | = 7.1 | No fix listed |
| ibm maximo asset management | = 7.5 | No fix listed |
| ibm maximo asset management | = 7.6 | No fix listed |
| ibm maximo asset management essentials | = 7.1 | No fix listed |
| ibm maximo asset management essentials | = 7.5 | No fix listed |
| ibm maximo for energy optimization | = 7.1 | No fix listed |
| ibm maximo for aviation | = 7.6 | No fix listed |
| ibm maximo for government | = 7.1 | No fix listed |
| ibm maximo for government | = 7.5 | No fix listed |
| ibm maximo for nuclear power | = 7.1 | No fix listed |
| ibm maximo for nuclear power | = 7.5 | No fix listed |
| ibm maximo for transportation | = 7.1 | No fix listed |
| ibm maximo for transportation | = 7.5 | No fix listed |
| ibm maximo for transportation | = 7.6 | No fix listed |
| ibm maximo for life sciences | = 7.1 | No fix listed |
| ibm maximo for life sciences | = 7.5 | No fix listed |
| ibm maximo for life sciences | = 7.6 | No fix listed |
| ibm maximo for oil and gas | = 7.1 | No fix listed |
| ibm maximo for oil and gas | = 7.5 | No fix listed |
| ibm maximo for utilities | = 7.1 | No fix listed |
| ibm maximo for utilities | = 7.5 | No fix listed |
| ibm control desk | = 7.5 | No fix listed |
| ibm control desk | = 7.6 | No fix listed |
| ibm tivoli asset management for it | = 7.1 | No fix listed |
| ibm tivoli asset management for it | = 7.2 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli service request manager | = 7.1 | No fix listed |
| ibm tivoli service request manager | = 7.2 | No fix listed |
| ibm change and configuration management database | = 7.1 | No fix listed |
| ibm change and configuration management database | = 7.2 | No fix listed |
References
- www-01.ibm.com patch vendor-advisory
- ibm-maximo-cve20155016-info-disc(106460) vdb-entry vendor-advisory