6.5

CVE-2013-5465

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Maximo Asset Management Version 7.5.0.0
Ibm ≫ Maximo Asset Management Version 7.5.0.1
Ibm ≫ Maximo Asset Management Version 7.5.0.2
Ibm ≫ Maximo Asset Management Version 7.5.0.3
Ibm ≫ Maximo Asset Management Version 7.5.0.4
Ibm ≫ Maximo Service Desk Version 7.1.1.7
   Ibm ≫ Maximo Service Desk Version 7.1.1.7
   Ibm ≫ Maximo Service Desk Version 7.1.1.7
Ibm ≫ Maximo Service Desk Version 7.1.1.11
   Ibm ≫ Maximo Service Desk Version 7.1.1.11
   Ibm ≫ Maximo Service Desk Version 7.1.1.11
Ibm ≫ Maximo Service Desk Version 7.1.1.12
   Ibm ≫ Maximo Service Desk Version 7.1.1.12
   Ibm ≫ Maximo Service Desk Version 7.1.1.12
Ibm ≫ Tivoli Asset Management For It Version 7.0
   Ibm ≫ Tivoli Asset Management For It Version 7.0
   Ibm ≫ Tivoli Asset Management For It Version 7.0
Ibm ≫ Tivoli Asset Management For It Version 7.1
   Ibm ≫ Tivoli Asset Management For It Version 7.1
   Ibm ≫ Tivoli Asset Management For It Version 7.1
Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.7
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.7
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.7
Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.11
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.11
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.11
Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.12
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.12
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.12
Ibm ≫ Tivoli Service Request Manager Version 7.1.1
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1
Ibm ≫ Tivoli Service Request Manager Version 7.1.1.7
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.7
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.7
Ibm ≫ Tivoli Service Request Manager Version 7.1.1.11
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.11
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.11
Ibm ≫ Tivoli Service Request Manager Version 7.1.1.12
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.12
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.12
Ibm ≫ Smartcloud Control Desk Version 7.0
Ibm ≫ Smartcloud Control Desk Version 7.5
Ibm ≫ Smartcloud Control Desk Version 7.5.0.0
Ibm ≫ Smartcloud Control Desk Version 7.5.0.1
Ibm ≫ Smartcloud Control Desk Version 7.5.0.2
Ibm ≫ Smartcloud Control Desk Version 7.5.1.0
Ibm ≫ Smartcloud Control Desk Version 7.5.1.1
Ibm ≫ Maximo Asset Management Version 7.1
Ibm ≫ Maximo Asset Management Version 7.1.1
Ibm ≫ Maximo Asset Management Version 7.1.1.1
Ibm ≫ Maximo Asset Management Version 7.1.1.2
Ibm ≫ Maximo Asset Management Version 7.1.1.5
Ibm ≫ Maximo Asset Management Version 7.1.1.6
Ibm ≫ Maximo Asset Management Version 7.1.1.7
Ibm ≫ Maximo Asset Management Version 7.1.1.11
Ibm ≫ Maximo Asset Management Version 7.1.1.12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.23% 0.65
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21670870
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IV46511
https://exchange.xforce.ibmcloud.com/vulnerabilities/88364