CVE-2012-6356
medium
CVSS v3
—
CVSS v2
6.5
VIR risk
6.5
Description
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21625624
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | maximo_asset_management | 7.5.0.0 | |
| ibm | maximo_asset_management_essentials | 7.5.0.0 | |
| ibm | smartcloud_control_desk | 7.5.0.0 | |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27329
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80748
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV27329
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80748
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.