CVE Vulnerabilities

CVE-2015-5051

Published: Jan 03, 2016 | Modified: Jan 06, 2016
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query results via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Maximo_asset_management Ibm 7.5 (including) 7.5 (including)
Maximo_asset_management Ibm 7.6 (including) 7.6 (including)
Maximo_asset_management_essentials Ibm 7.5 (including) 7.5 (including)
Maximo_asset_management_essentials Ibm 7.6 (including) 7.6 (including)
Maximo_for_government Ibm 7.5 (including) 7.5 (including)
Maximo_for_life_sciences Ibm 7.5 (including) 7.5 (including)
Maximo_for_life_sciences Ibm 7.6 (including) 7.6 (including)
Maximo_for_nuclear_power Ibm 7.5 (including) 7.5 (including)
Maximo_for_oil_and_gas Ibm 7.5 (including) 7.5 (including)
Maximo_for_transportation Ibm 7.5 (including) 7.5 (including)
Maximo_for_utilities Ibm 7.5 (including) 7.5 (including)
Smartcloud_control_desk Ibm 7.5 (including) 7.5 (including)
Smartcloud_control_desk Ibm 7.6 (including) 7.6 (including)

References