CVE-2012-6357
medium
CVSS v3
—
CVSS v2
6.5
VIR risk
6.5
Description
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21625624
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | maximo_asset_management | 7.5.0.0 | |
| ibm | maximo_asset_management_essentials | 7.5.0.0 | |
| ibm | smartcloud_control_desk | 7.5.0.0 | |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23511
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80749
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23511
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80749
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.