2.1

CVE-2015-1933

EPSS 0.08%
Published 04.10.2015 02:59:00
Last modified 12.04.2025 10:46:40
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not have an off autocomplete attribute for the password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Change And Configuration Management Database Version7.1

Ibm ≫ Change And Configuration Management Database Version7.2

Ibm ≫ Maximo Asset Management Version7.1

Ibm ≫ Maximo Asset Management Version7.1.1

Ibm ≫ Maximo Asset Management Version7.1.1.1

Ibm ≫ Maximo Asset Management Version7.1.1.2

Ibm ≫ Maximo Asset Management Version7.1.1.5

Ibm ≫ Maximo Asset Management Version7.1.1.6

Ibm ≫ Maximo Asset Management Version7.1.1.7

Ibm ≫ Maximo Asset Management Version7.1.1.8

Ibm ≫ Maximo Asset Management Version7.1.1.9

Ibm ≫ Maximo Asset Management Version7.1.1.10

Ibm ≫ Maximo Asset Management Version7.1.1.11

Ibm ≫ Maximo Asset Management Version7.1.1.12

Ibm ≫ Maximo Asset Management Version7.1.1.13

Ibm ≫ Maximo Asset Management Version7.5.0.0

Ibm ≫ Maximo Asset Management Version7.5.0.1

Ibm ≫ Maximo Asset Management Version7.5.0.2

Ibm ≫ Maximo Asset Management Version7.5.0.3

Ibm ≫ Maximo Asset Management Version7.5.0.4

Ibm ≫ Maximo Asset Management Version7.5.0.5

Ibm ≫ Maximo Asset Management Version7.5.0.6

Ibm ≫ Maximo Asset Management Version7.5.0.7

Ibm ≫ Maximo Asset Management Version7.5.0.8

Ibm ≫ Maximo Asset Management Version7.6.0.0

Ibm ≫ Maximo Asset Management Essentials Version7.1

Ibm ≫ Maximo Asset Management Essentials Version7.5

Ibm ≫ Maximo For Energy Optimization Version7.1

Ibm ≫ Maximo For Government Version7.1

Ibm ≫ Maximo For Government Version7.5.0.0

Ibm ≫ Maximo For Government Version7.5.0.1

Ibm ≫ Maximo For Government Version7.5.0.2

Ibm ≫ Maximo For Government Version7.5.0.3

Ibm ≫ Maximo For Government Version7.5.0.4

Ibm ≫ Maximo For Government Version7.5.0.5

Ibm ≫ Maximo For Government Version7.5.0.6

Ibm ≫ Maximo For Life Sciences Version7.1

Ibm ≫ Maximo For Life Sciences Version7.5.0.0

Ibm ≫ Maximo For Life Sciences Version7.5.0.1

Ibm ≫ Maximo For Life Sciences Version7.5.0.2

Ibm ≫ Maximo For Life Sciences Version7.5.0.3

Ibm ≫ Maximo For Life Sciences Version7.5.0.4

Ibm ≫ Maximo For Life Sciences Version7.5.0.5

Ibm ≫ Maximo For Life Sciences Version7.5.0.6

Ibm ≫ Maximo For Nuclear Power Version7.1

Ibm ≫ Maximo For Nuclear Power Version7.5.0.0

Ibm ≫ Maximo For Nuclear Power Version7.5.0.1

Ibm ≫ Maximo For Nuclear Power Version7.5.0.2

Ibm ≫ Maximo For Nuclear Power Version7.5.0.3

Ibm ≫ Maximo For Nuclear Power Version7.5.0.4

Ibm ≫ Maximo For Nuclear Power Version7.5.0.5

Ibm ≫ Maximo For Nuclear Power Version7.5.0.6

Ibm ≫ Maximo For Oil And Gas Version7.1

Ibm ≫ Maximo For Oil And Gas Version7.5.0.0

Ibm ≫ Maximo For Oil And Gas Version7.5.0.1

Ibm ≫ Maximo For Oil And Gas Version7.5.0.2

Ibm ≫ Maximo For Oil And Gas Version7.5.0.3

Ibm ≫ Maximo For Oil And Gas Version7.5.0.4

Ibm ≫ Maximo For Oil And Gas Version7.5.0.5

Ibm ≫ Maximo For Oil And Gas Version7.5.0.6

Ibm ≫ Maximo For Transportation Version7.1

Ibm ≫ Maximo For Transportation Version7.5.0.0

Ibm ≫ Maximo For Transportation Version7.5.0.1

Ibm ≫ Maximo For Transportation Version7.5.0.2

Ibm ≫ Maximo For Transportation Version7.5.0.3

Ibm ≫ Maximo For Transportation Version7.5.0.4

Ibm ≫ Maximo For Transportation Version7.5.0.5

Ibm ≫ Maximo For Transportation Version7.5.0.6

Ibm ≫ Maximo For Utilities Version7.1

Ibm ≫ Maximo For Utilities Version7.5.0.0

Ibm ≫ Maximo For Utilities Version7.5.0.1

Ibm ≫ Maximo For Utilities Version7.5.0.2

Ibm ≫ Maximo For Utilities Version7.5.0.3

Ibm ≫ Maximo For Utilities Version7.5.0.4

Ibm ≫ Maximo For Utilities Version7.5.0.5

Ibm ≫ Maximo For Utilities Version7.5.0.6

Ibm ≫ Smartcloud Control Desk Version7.5

Ibm ≫ Tivoli Asset Management For It Version7.1

Ibm ≫ Tivoli Asset Management For It Version7.2

Ibm ≫ Tivoli Service Request Manager Version7.1.0

Ibm ≫ Tivoli Service Request Manager Version7.2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.206

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg21965080

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-1933

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1933

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1933

EUVD