CVE-2015-7396

Published: Jan 2, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors.

Affected (12)

Products: Ibm: Maximo Asset Management, Maximo Asset Management Essentials, Maximo For Government, Maximo For Life Sciences, Maximo For Nuclear Power, Maximo For Oil And Gas, Maximo For Transportation, Maximo For Utilities, Smartcloud Control Desk

Ibm

9 products

Maximo Asset Management

Maximo Asset Management Essentials

Maximo For Government

Maximo For Life Sciences

Maximo For Nuclear Power

Maximo For Oil And Gas

Maximo For Transportation

Maximo For Utilities

Smartcloud Control Desk

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.5
Ibm Maximo Asset Management	Version 7.6
Ibm Maximo Asset Management Essentials	Version 7.5
Ibm Maximo For Government	Version 7.5
Ibm Maximo For Life Sciences	Version 7.5
Ibm Maximo For Life Sciences	Version 7.6
Ibm Maximo For Nuclear Power	Version 7.5
Ibm Maximo For Oil And Gas	Version 7.5
Ibm Maximo For Transportation	Version 7.5
Ibm Maximo For Utilities	Version 7.5
Ibm Smartcloud Control Desk	Version 7.5
Ibm Smartcloud Control Desk	Version 7.6

Related CWEs

CWE-264

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21970799

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21970799

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.