2.1

CVE-2014-6102

EPSS 0.49%
Veröffentlicht 17.02.2015 01:59:00
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly handle logout actions, which allows remote attackers to bypass intended Cognos BI Direct Integration access restrictions by leveraging an unattended workstation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

NVD 48 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Change And Configuration Management Database Version 7.1

Ibm ≫ Change And Configuration Management Database Version 7.2

Ibm ≫ Maximo Asset Management Version 7.1

Ibm ≫ Maximo Asset Management Version 7.1.1

Ibm ≫ Maximo Asset Management Version 7.1.1.1

Ibm ≫ Maximo Asset Management Version 7.1.1.2

Ibm ≫ Maximo Asset Management Version 7.1.1.5

Ibm ≫ Maximo Asset Management Version 7.1.1.6

Ibm ≫ Maximo Asset Management Version 7.1.1.7

Ibm ≫ Maximo Asset Management Version 7.1.1.8

Ibm ≫ Maximo Asset Management Version 7.1.1.9

Ibm ≫ Maximo Asset Management Version 7.1.1.10

Ibm ≫ Maximo Asset Management Version 7.1.1.11

Ibm ≫ Maximo Asset Management Version 7.1.1.12

Ibm ≫ Maximo Asset Management Version 7.1.1.13

Ibm ≫ Maximo Asset Management Version 7.1.2

Ibm ≫ Maximo Asset Management Version 7.5.0.0

Ibm ≫ Maximo Asset Management Version 7.5.0.1

Ibm ≫ Maximo Asset Management Version 7.5.0.2

Ibm ≫ Maximo Asset Management Version 7.5.0.3

Ibm ≫ Maximo Asset Management Version 7.5.0.4

Ibm ≫ Maximo Asset Management Version 7.5.0.5

Ibm ≫ Maximo Asset Management Version 7.5.0.6

Ibm ≫ Maximo Asset Management Version 7.5.0.10

Ibm ≫ Maximo Asset Management Essentials Version 7.1

Ibm ≫ Maximo Asset Management Essentials Version 7.5.0.0

Ibm ≫ Maximo For Government Version 7.1

Ibm ≫ Maximo For Government Version 7.5.0.0

Ibm ≫ Maximo For Life Sciences Version 7.1

Ibm ≫ Maximo For Life Sciences Version 7.5.0.0

Ibm ≫ Maximo For Nuclear Power Version 7.1

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.0

Ibm ≫ Maximo For Oil And Gas Version 7.1

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.0

Ibm ≫ Maximo For Transportation Version 7.1

Ibm ≫ Maximo For Transportation Version 7.5.0.0

Ibm ≫ Maximo For Utilities Version 7.1

Ibm ≫ Maximo For Utilities Version 7.5.0.0

Ibm ≫ Smartcloud Control Desk Version 7.5.0.1

Ibm ≫ Smartcloud Control Desk Version 7.5.0.2

Ibm ≫ Smartcloud Control Desk Version 7.5.0.3

Ibm ≫ Smartcloud Control Desk Version 7.5.0.5

Ibm ≫ Smartcloud Control Desk Version 7.5.1.0

Ibm ≫ Smartcloud Control Desk Version 7.5.1.1

Ibm ≫ Tivoli Asset Management For It Version 7.1

Ibm ≫ Tivoli Asset Management For It Version 7.2

Ibm ≫ Tivoli Service Request Manager Version 7.1

Ibm ≫ Tivoli Service Request Manager Version 7.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.49%	0.379

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www-01.ibm.com/support/docview.wss?uid=swg21695597

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/96141

https://nvd.nist.gov/vuln/detail/CVE-2014-6102

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-6102

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-6102

EUVD