2.1

CVE-2015-1933

EPSS 0.08%
Veröffentlicht 04.10.2015 02:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not have an off autocomplete attribute for the password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Change And Configuration Management Database Version7.1

Ibm ≫ Change And Configuration Management Database Version7.2

Ibm ≫ Maximo Asset Management Version7.1

Ibm ≫ Maximo Asset Management Version7.1.1

Ibm ≫ Maximo Asset Management Version7.1.1.1

Ibm ≫ Maximo Asset Management Version7.1.1.2

Ibm ≫ Maximo Asset Management Version7.1.1.5

Ibm ≫ Maximo Asset Management Version7.1.1.6

Ibm ≫ Maximo Asset Management Version7.1.1.7

Ibm ≫ Maximo Asset Management Version7.1.1.8

Ibm ≫ Maximo Asset Management Version7.1.1.9

Ibm ≫ Maximo Asset Management Version7.1.1.10

Ibm ≫ Maximo Asset Management Version7.1.1.11

Ibm ≫ Maximo Asset Management Version7.1.1.12

Ibm ≫ Maximo Asset Management Version7.1.1.13

Ibm ≫ Maximo Asset Management Version7.5.0.0

Ibm ≫ Maximo Asset Management Version7.5.0.1

Ibm ≫ Maximo Asset Management Version7.5.0.2

Ibm ≫ Maximo Asset Management Version7.5.0.3

Ibm ≫ Maximo Asset Management Version7.5.0.4

Ibm ≫ Maximo Asset Management Version7.5.0.5

Ibm ≫ Maximo Asset Management Version7.5.0.6

Ibm ≫ Maximo Asset Management Version7.5.0.7

Ibm ≫ Maximo Asset Management Version7.5.0.8

Ibm ≫ Maximo Asset Management Version7.6.0.0

Ibm ≫ Maximo Asset Management Essentials Version7.1

Ibm ≫ Maximo Asset Management Essentials Version7.5

Ibm ≫ Maximo For Energy Optimization Version7.1

Ibm ≫ Maximo For Government Version7.1

Ibm ≫ Maximo For Government Version7.5.0.0

Ibm ≫ Maximo For Government Version7.5.0.1

Ibm ≫ Maximo For Government Version7.5.0.2

Ibm ≫ Maximo For Government Version7.5.0.3

Ibm ≫ Maximo For Government Version7.5.0.4

Ibm ≫ Maximo For Government Version7.5.0.5

Ibm ≫ Maximo For Government Version7.5.0.6

Ibm ≫ Maximo For Life Sciences Version7.1

Ibm ≫ Maximo For Life Sciences Version7.5.0.0

Ibm ≫ Maximo For Life Sciences Version7.5.0.1

Ibm ≫ Maximo For Life Sciences Version7.5.0.2

Ibm ≫ Maximo For Life Sciences Version7.5.0.3

Ibm ≫ Maximo For Life Sciences Version7.5.0.4

Ibm ≫ Maximo For Life Sciences Version7.5.0.5

Ibm ≫ Maximo For Life Sciences Version7.5.0.6

Ibm ≫ Maximo For Nuclear Power Version7.1

Ibm ≫ Maximo For Nuclear Power Version7.5.0.0

Ibm ≫ Maximo For Nuclear Power Version7.5.0.1

Ibm ≫ Maximo For Nuclear Power Version7.5.0.2

Ibm ≫ Maximo For Nuclear Power Version7.5.0.3

Ibm ≫ Maximo For Nuclear Power Version7.5.0.4

Ibm ≫ Maximo For Nuclear Power Version7.5.0.5

Ibm ≫ Maximo For Nuclear Power Version7.5.0.6

Ibm ≫ Maximo For Oil And Gas Version7.1

Ibm ≫ Maximo For Oil And Gas Version7.5.0.0

Ibm ≫ Maximo For Oil And Gas Version7.5.0.1

Ibm ≫ Maximo For Oil And Gas Version7.5.0.2

Ibm ≫ Maximo For Oil And Gas Version7.5.0.3

Ibm ≫ Maximo For Oil And Gas Version7.5.0.4

Ibm ≫ Maximo For Oil And Gas Version7.5.0.5

Ibm ≫ Maximo For Oil And Gas Version7.5.0.6

Ibm ≫ Maximo For Transportation Version7.1

Ibm ≫ Maximo For Transportation Version7.5.0.0

Ibm ≫ Maximo For Transportation Version7.5.0.1

Ibm ≫ Maximo For Transportation Version7.5.0.2

Ibm ≫ Maximo For Transportation Version7.5.0.3

Ibm ≫ Maximo For Transportation Version7.5.0.4

Ibm ≫ Maximo For Transportation Version7.5.0.5

Ibm ≫ Maximo For Transportation Version7.5.0.6

Ibm ≫ Maximo For Utilities Version7.1

Ibm ≫ Maximo For Utilities Version7.5.0.0

Ibm ≫ Maximo For Utilities Version7.5.0.1

Ibm ≫ Maximo For Utilities Version7.5.0.2

Ibm ≫ Maximo For Utilities Version7.5.0.3

Ibm ≫ Maximo For Utilities Version7.5.0.4

Ibm ≫ Maximo For Utilities Version7.5.0.5

Ibm ≫ Maximo For Utilities Version7.5.0.6

Ibm ≫ Smartcloud Control Desk Version7.5

Ibm ≫ Tivoli Asset Management For It Version7.1

Ibm ≫ Tivoli Asset Management For It Version7.2

Ibm ≫ Tivoli Service Request Manager Version7.1.0

Ibm ≫ Tivoli Service Request Manager Version7.2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.206

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg21965080

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-1933

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1933

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1933

EUVD