3.5

CVE-2013-6741

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837 allow remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Maximo Asset Management Version 7.1
Ibm ≫ Maximo Asset Management Version 7.1.1
Ibm ≫ Maximo Asset Management Version 7.1.1.1
Ibm ≫ Maximo Asset Management Version 7.1.1.2
Ibm ≫ Maximo Asset Management Version 7.1.1.5
Ibm ≫ Maximo Asset Management Version 7.1.1.6
Ibm ≫ Maximo Asset Management Version 7.1.1.7
Ibm ≫ Maximo Service Desk Version 7.1.1.7
   Ibm ≫ Maximo Service Desk Version 7.1.1.7
   Ibm ≫ Maximo Service Desk Version 7.1.1.7
Ibm ≫ Tivoli Asset Management For It Version 7.0
   Ibm ≫ Tivoli Asset Management For It Version 7.0
   Ibm ≫ Tivoli Asset Management For It Version 7.0
Ibm ≫ Tivoli Asset Management For It Version 7.1
   Ibm ≫ Tivoli Asset Management For It Version 7.1
   Ibm ≫ Tivoli Asset Management For It Version 7.1
Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.7
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.7
   Ibm ≫ Tivoli It Asset Management For It Version 7.1.1.7
Ibm ≫ Tivoli Service Request Manager Version 7.1.1
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1
Ibm ≫ Tivoli Service Request Manager Version 7.1.1.7
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.7
   Ibm ≫ Tivoli Service Request Manager Version 7.1.1.7
Ibm ≫ Maximo Asset Management Version 7.5.0.0
Ibm ≫ Maximo Asset Management Version 7.5.0.1
Ibm ≫ Maximo Asset Management Version 7.5.0.2
Ibm ≫ Maximo Asset Management Version 7.5.0.3
Ibm ≫ Maximo Asset Management Version 7.5.0.4
Ibm ≫ Maximo Asset Management Version 7.5.0.5
Ibm ≫ Smartcloud Control Desk Version 7.0
Ibm ≫ Smartcloud Control Desk Version 7.5
Ibm ≫ Smartcloud Control Desk Version 7.5.0.0
Ibm ≫ Smartcloud Control Desk Version 7.5.0.1
Ibm ≫ Smartcloud Control Desk Version 7.5.0.2
Ibm ≫ Smartcloud Control Desk Version 7.5.1.0
Ibm ≫ Smartcloud Control Desk Version 7.5.1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.95% 0.566
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg21670870
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IV50316
https://exchange.xforce.ibmcloud.com/vulnerabilities/89857