IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly encrypt passwords, which makes it easier for context-dependent attackers to determine cleartext passwords by leveraging access to a password file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Change_and_configuration_management_database | Ibm | 7.1 (including) | 7.1 (including) |
| Change_and_configuration_management_database | Ibm | 7.2 (including) | 7.2 (including) |
| Maximo_asset_management | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_asset_management | Ibm | 7.1.1 (including) | 7.1.1 (including) |
| Maximo_asset_management | Ibm | 7.1.1.1 (including) | 7.1.1.1 (including) |
| Maximo_asset_management | Ibm | 7.1.1.2 (including) | 7.1.1.2 (including) |
| Maximo_asset_management | Ibm | 7.1.1.5 (including) | 7.1.1.5 (including) |
| Maximo_asset_management | Ibm | 7.1.1.6 (including) | 7.1.1.6 (including) |
| Maximo_asset_management | Ibm | 7.1.1.7 (including) | 7.1.1.7 (including) |
| Maximo_asset_management | Ibm | 7.1.1.8 (including) | 7.1.1.8 (including) |
| Maximo_asset_management | Ibm | 7.1.1.9 (including) | 7.1.1.9 (including) |
| Maximo_asset_management | Ibm | 7.1.1.10 (including) | 7.1.1.10 (including) |
| Maximo_asset_management | Ibm | 7.1.1.11 (including) | 7.1.1.11 (including) |
| Maximo_asset_management | Ibm | 7.1.1.12 (including) | 7.1.1.12 (including) |
| Maximo_asset_management | Ibm | 7.1.1.13 (including) | 7.1.1.13 (including) |
| Maximo_asset_management | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_asset_management | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_asset_management | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_asset_management | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_asset_management | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_asset_management | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_asset_management | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_asset_management | Ibm | 7.5.0.7 (including) | 7.5.0.7 (including) |
| Maximo_asset_management | Ibm | 7.5.0.8 (including) | 7.5.0.8 (including) |
| Maximo_asset_management | Ibm | 7.6.0.0 (including) | 7.6.0.0 (including) |
| Maximo_asset_management_essentials | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_asset_management_essentials | Ibm | 7.5 (including) | 7.5 (including) |
| Maximo_for_energy_optimization | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_government | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_government | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_government | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_for_government | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_for_government | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_for_government | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_for_government | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_for_government | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_for_life_sciences | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_for_life_sciences | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_for_nuclear_power | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_for_nuclear_power | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_for_transportation | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_for_transportation | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Maximo_for_utilities | Ibm | 7.1 (including) | 7.1 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.5 (including) | 7.5.0.5 (including) |
| Maximo_for_utilities | Ibm | 7.5.0.6 (including) | 7.5.0.6 (including) |
| Smartcloud_control_desk | Ibm | 7.5 (including) | 7.5 (including) |
| Tivoli_asset_management_for_it | Ibm | 7.1 (including) | 7.1 (including) |
| Tivoli_asset_management_for_it | Ibm | 7.2 (including) | 7.2 (including) |
| Tivoli_service_request_manager | Ibm | 7.1.0 (including) | 7.1.0 (including) |
| Tivoli_service_request_manager | Ibm | 7.2.0.0 (including) | 7.2.0.0 (including) |