← Back

CVE-2015-5016

nvd nist
Published: Mar 27, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460.

Affected (29)

Ibm
14 products
Maximo Asset Management
Maximo Asset Management Essentials
Maximo For Energy Optimization
Maximo For Aviation
Maximo For Government
Maximo For Nuclear Power
Maximo For Transportation
Maximo For Life Sciences
Maximo For Oil And Gas
Maximo For Utilities
Control Desk
Tivoli Asset Management For It
Tivoli Service Request Manager
Change And Configuration Management Database
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo Asset Management
Version 7.1
Maximo Asset Management
Version 7.5
Maximo Asset Management
Version 7.6
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo Asset Management Essentials
Version 7.1
Maximo Asset Management Essentials
Version 7.5
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Maximo For Energy Optimization
Version 7.1
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Maximo For Aviation
Version 7.6
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo For Government
Version 7.1
Maximo For Government
Version 7.5
Configuration F
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo For Nuclear Power
Version 7.1
Maximo For Nuclear Power
Version 7.5
Configuration G
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo For Transportation
Version 7.1
Maximo For Transportation
Version 7.5
Maximo For Transportation
Version 7.6
Configuration H
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo For Life Sciences
Version 7.1
Maximo For Life Sciences
Version 7.5
Maximo For Life Sciences
Version 7.6
Configuration I
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo For Oil And Gas
Version 7.1
Maximo For Oil And Gas
Version 7.5
Configuration J
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo For Utilities
Version 7.1
Maximo For Utilities
Version 7.5
Configuration K
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Control Desk
Version 7.5
Control Desk
Version 7.6
Configuration L
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Tivoli Asset Management For It
Version 7.1
Tivoli Asset Management For It
Version 7.2
Configuration M
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Tivoli Service Request Manager
Version 7.1
Tivoli Service Request Manager
Version 7.2
Configuration N
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Change And Configuration Management Database
Version 7.1
Change And Configuration Management Database
Version 7.2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.