IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly handle logout actions, which allows remote attackers to bypass intended Cognos BI Direct Integration access restrictions by leveraging an unattended workstation.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Change_and_configuration_management_database | Ibm | 7.1 (including) | 7.1 (including) |
| Change_and_configuration_management_database | Ibm | 7.2 (including) | 7.2 (including) |
| Maximo_asset_management | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_asset_management | Ibm | 7.1.1 (including) | 7.1.1 (including) |
| Maximo_asset_management | Ibm | 7.1.1.1 (including) | 7.1.1.1 (including) |
| Maximo_asset_management | Ibm | 7.1.1.2 (including) | 7.1.1.2 (including) |
| Maximo_asset_management | Ibm | 7.1.1.5 (including) | 7.1.1.5 (including) |
| Maximo_asset_management | Ibm | 7.1.1.6 (including) | 7.1.1.6 (including) |
| Maximo_asset_management | Ibm | 7.1.1.7 (including) | 7.1.1.7 (including) |
| Maximo_asset_management | Ibm | 7.1.1.8 (including) | 7.1.1.8 (including) |
| Maximo_asset_management | Ibm | 7.1.1.9 (including) | 7.1.1.9 (including) |
| Maximo_asset_management | Ibm | 7.1.1.10 (including) | 7.1.1.10 (including) |
| Maximo_asset_management | Ibm | 7.1.1.11 (including) | 7.1.1.11 (including) |
| Maximo_asset_management | Ibm | 7.1.1.12 (including) | 7.1.1.12 (including) |
| Maximo_asset_management | Ibm | 7.1.1.13 (including) | 7.1.1.13 (including) |
| Maximo_asset_management | Ibm | 7.1.2 (including) | 7.1.2 (including) |
| Maximo_asset_management | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_asset_management | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_asset_management | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_asset_management | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_asset_management | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_asset_management | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_asset_management | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_asset_management | Ibm | 7.5.0.10 (including) | 7.5.0.10 (including) |
| Maximo_asset_management_essentials | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_asset_management_essentials | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_government | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_government | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_life_sciences | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_nuclear_power | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_transportation | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_utilities | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Smartcloud_control_desk | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Smartcloud_control_desk | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Smartcloud_control_desk | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Smartcloud_control_desk | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Smartcloud_control_desk | Ibm | 7.5.1.0 (including) | 7.5.1.0 (including) |
| Smartcloud_control_desk | Ibm | 7.5.1.1 (including) | 7.5.1.1 (including) |
| Tivoli_asset_management_for_it | Ibm | 7.1 (including) | 7.1 (including) |
| Tivoli_asset_management_for_it | Ibm | 7.2 (including) | 7.2 (including) |
| Tivoli_service_request_manager | Ibm | 7.1 (including) | 7.1 (including) |
| Tivoli_service_request_manager | Ibm | 7.2 (including) | 7.2 (including) |