IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Control_desk | Ibm | 7.6.1 (including) | 7.6.1 (including) |
| Control_desk | Ibm | 7.6.1.1 (including) | 7.6.1.1 (including) |
| Maximo_asset_configuration_manager | Ibm | 7.6.6 (including) | 7.6.6 (including) |
| Maximo_asset_configuration_manager | Ibm | 7.6.7 (including) | 7.6.7 (including) |
| Maximo_asset_configuration_manager | Ibm | 7.6.7.1 (including) | 7.6.7.1 (including) |
| Maximo_asset_health_insights | Ibm | 7.6.1 (including) | 7.6.1 (including) |
| Maximo_asset_health_insights | Ibm | 7.6.1.1 (including) | 7.6.1.1 (including) |
| Maximo_asset_management | Ibm | 7.6.0 (including) | 7.6.0 (including) |
| Maximo_asset_management | Ibm | 7.6.1 (including) | 7.6.1 (including) |
| Maximo_asset_management | Ibm | 7.6.1.1 (including) | 7.6.1.1 (including) |
| Maximo_asset_management_scheduler | Ibm | 7.6.7 (including) | 7.6.7 (including) |
| Maximo_asset_management_scheduler | Ibm | 7.6.7.1 (including) | 7.6.7.1 (including) |
| Maximo_asset_management_scheduler | Ibm | 7.6.7.3 (including) | 7.6.7.3 (including) |
| Maximo_asset_management_scheduler_plus | Ibm | 7.6.7 (including) | 7.6.7 (including) |
| Maximo_asset_management_scheduler_plus | Ibm | 7.6.7.1 (including) | 7.6.7.1 (including) |
| Maximo_asset_management_scheduler_plus | Ibm | 7.6.7.3 (including) | 7.6.7.3 (including) |
| Maximo_calibration | Ibm | 7.6 (including) | 7.6 (including) |
| Maximo_enterprise_adapter | Ibm | 7.6 (including) | 7.6 (including) |
| Maximo_enterprise_adapter | Ibm | 7.6.1 (including) | 7.6.1 (including) |
| Maximo_equipment_maintenance_assistant_on-premises | Ibm | - (including) | - (including) |
| Maximo_for_aviation | Ibm | 7.6.6 (including) | 7.6.6 (including) |
| Maximo_for_aviation | Ibm | 7.6.7 (including) | 7.6.7 (including) |
| Maximo_for_aviation | Ibm | 7.6.8 (including) | 7.6.8 (including) |
| Maximo_for_life_sciences | Ibm | 7.6 (including) | 7.6 (including) |
| Maximo_for_nuclear_power | Ibm | 7.6.1 (including) | 7.6.1 (including) |
| Maximo_for_oil_and_gas | Ibm | 7.6.1 (including) | 7.6.1 (including) |
| Maximo_for_service_providers | Ibm | 7.6.3.1 (including) | 7.6.3.1 (including) |
| Maximo_for_service_providers | Ibm | 7.6.3.2 (including) | 7.6.3.2 (including) |
| Maximo_for_service_providers | Ibm | 7.6.3.3 (including) | 7.6.3.3 (including) |
| Maximo_for_transportation | Ibm | 7.6.2.3 (including) | 7.6.2.3 (including) |
| Maximo_for_transportation | Ibm | 7.6.2.4 (including) | 7.6.2.4 (including) |
| Maximo_for_transportation | Ibm | 7.6.2.5 (including) | 7.6.2.5 (including) |
| Maximo_for_utilities | Ibm | 7.6.0.1 (including) | 7.6.0.1 (including) |
| Maximo_for_utilities | Ibm | 7.6.0.2 (including) | 7.6.0.2 (including) |
| Maximo_linear_asset_manager | Ibm | 7.6.0.1 (including) | 7.6.0.1 (including) |
| Maximo_linear_asset_manager | Ibm | 7.6.0.2 (including) | 7.6.0.2 (including) |
| Maximo_linear_asset_manager | Ibm | 7.6.0.3 (including) | 7.6.0.3 (including) |
| Maximo_network_on_blockchain | Ibm | 7.6.0.0 (including) | 7.6.0.0 (including) |
| Maximo_network_on_blockchain | Ibm | 7.6.0.1 (including) | 7.6.0.1 (including) |
| Tivoli_integration_composer | Ibm | 7.6 (including) | 7.6 (including) |