CVE-2015-7452

Published: Jan 2, 2016Modified: May 6, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive information via the REST API.

Affected (12)

Products: Ibm: Maximo Asset Management, Maximo Asset Management Essentials, Maximo For Government, Maximo For Life Sciences, Maximo For Nuclear Power, Maximo For Oil And Gas, Maximo For Transportation, Maximo For Utilities, Smartcloud Control Desk

Ibm

9 products

Maximo Asset Management

Maximo Asset Management Essentials

Maximo For Government

Maximo For Life Sciences

Maximo For Nuclear Power

Maximo For Oil And Gas

Maximo For Transportation

Maximo For Utilities

Smartcloud Control Desk

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.5
Ibm Maximo Asset Management	Version 7.6
Ibm Maximo Asset Management Essentials	Version 7.5
Ibm Maximo For Government	Version 7.5
Ibm Maximo For Life Sciences	Version 7.5
Ibm Maximo For Life Sciences	Version 7.6
Ibm Maximo For Nuclear Power	Version 7.5
Ibm Maximo For Oil And Gas	Version 7.5
Ibm Maximo For Transportation	Version 7.5
Ibm Maximo For Utilities	Version 7.5
Ibm Smartcloud Control Desk	Version 7.5
Ibm Smartcloud Control Desk	Version 7.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21972463

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21972463

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.