← Back

CVE-2016-0222

nvd nist
Published: Mar 14, 2016Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors.

Affected (11)

Ibm
8 products
Smartcloud Control Desk
Maximo Asset Management
Maximo For Government
Maximo For Life Sciences
Maximo For Nuclear Power
Maximo For Oil And Gas
Maximo For Transportation
Maximo For Utilities
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Smartcloud Control Desk
All versions
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Maximo Asset Management
Version 7.6.0.0
Maximo Asset Management
Version 7.6.0.1
Maximo Asset Management
Version 7.6.0.2
Maximo Asset Management
Version 7.6.0.3
Maximo For Government
All versions
Maximo For Life Sciences
All versions
Maximo For Nuclear Power
All versions
Maximo For Oil And Gas
All versions
Maximo For Transportation
All versions
Maximo For Utilities
All versions

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.