IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated with restricted storerooms, via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Maximo_asset_management | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_asset_management | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_asset_management | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_asset_management | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_asset_management | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_asset_management | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV46277
- http://www-01.ibm.com/support/docview.wss?uid=swg21670870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88362
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV46277
- http://www-01.ibm.com/support/docview.wss?uid=swg21670870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88362