4
CVE-2012-2185
- EPSS 1.09%
- Veröffentlicht 10.09.2012 17:55:01
- Zuletzt bearbeitet 16.06.2026 23:41:08
- Erkennungen
LoginIBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Change And Configuration Management Database Version 6.0
Ibm ≫ Change And Configuration Management Database Version 7.0
Ibm ≫ Maximo Asset Management Version 6.2.0.0
Ibm ≫ Maximo Asset Management Version 7.1.0.0
Ibm ≫ Maximo Asset Management Version 7.5.0.0
Ibm ≫ Maximo Service Desk Version 6.2
Ibm ≫ Smartcloud Control Desk Version 7.0
Ibm ≫ Tivoli Asset Management For It Version 6.0
Ibm ≫ Tivoli Asset Management For It Version 6.2
Ibm ≫ Tivoli Asset Management For It Version 7.0
Ibm ≫ Tivoli Asset Management For It Version 7.1
Ibm ≫ Tivoli Asset Management For It Version 7.2
Ibm ≫ Tivoli Service Request Manager Version 7.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.09% | 0.612 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://secunia.com/advisories/50551
http://www-01.ibm.com/support/docview.wss?uid=swg21610081
http://osvdb.org/85183
http://www-01.ibm.com/support/docview.wss?uid=swg1IV17942
https://exchange.xforce.ibmcloud.com/vulnerabilities/75784