4.9

CVE-2015-7487

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Maximo Asset Management Version 7.1
Ibm ≫ Maximo Asset Management Version 7.1.1
Ibm ≫ Maximo Asset Management Version 7.1.1.1
Ibm ≫ Maximo Asset Management Version 7.1.1.2
Ibm ≫ Maximo Asset Management Version 7.1.1.5
Ibm ≫ Maximo Asset Management Version 7.1.1.6
Ibm ≫ Maximo Asset Management Version 7.1.1.7
Ibm ≫ Maximo Asset Management Version 7.1.1.8
Ibm ≫ Maximo Asset Management Version 7.1.1.9
Ibm ≫ Maximo Asset Management Version 7.1.1.10
Ibm ≫ Maximo Asset Management Version 7.1.1.11
Ibm ≫ Maximo Asset Management Version 7.1.1.12
Ibm ≫ Maximo Asset Management Version 7.1.1.13
Ibm ≫ Maximo Asset Management Version 7.5
Ibm ≫ Maximo Asset Management Version 7.5.0.0
Ibm ≫ Maximo Asset Management Version 7.5.0.1
Ibm ≫ Maximo Asset Management Version 7.5.0.2
Ibm ≫ Maximo Asset Management Version 7.5.0.3
Ibm ≫ Maximo Asset Management Version 7.5.0.4
Ibm ≫ Maximo Asset Management Version 7.5.0.5
Ibm ≫ Maximo Asset Management Version 7.5.0.6
Ibm ≫ Maximo Asset Management Version 7.5.0.7
Ibm ≫ Maximo Asset Management Version 7.5.0.8
Ibm ≫ Maximo Asset Management Version 7.5.0.9
Ibm ≫ Maximo Asset Management Version 7.6
Ibm ≫ Maximo Asset Management Version 7.6.0.0
Ibm ≫ Maximo Asset Management Version 7.6.0.1
Ibm ≫ Maximo Asset Management Version 7.6.0.2
Ibm ≫ Maximo Asset Management Version 7.6.0.3
Ibm ≫ Maximo For Government Version 7.1
Ibm ≫ Maximo For Government Version 7.5
Ibm ≫ Maximo For Life Sciences Version 7.1
Ibm ≫ Maximo For Life Sciences Version 7.5
Ibm ≫ Maximo For Nuclear Power Version 7.1
Ibm ≫ Maximo For Nuclear Power Version 7.5
Ibm ≫ Maximo For Oil And Gas Version 7.1
Ibm ≫ Maximo For Oil And Gas Version 7.5
Ibm ≫ Maximo For Transportation Version 7.1
Ibm ≫ Maximo For Transportation Version 7.5
Ibm ≫ Maximo For Utilities Version 7.1
Ibm ≫ Maximo For Utilities Version 7.5
Ibm ≫ Smartcloud Control Desk Version 7.5.1.0
Ibm ≫ Smartcloud Control Desk Version 7.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.199
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.1 0.5 3.6
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg21974537
Vendor Advisory