VIR Vulnerability Intelligence Relay

CVE-2015-4966

medium
Published 2015-11-08 · Modified 2026-05-06
CVSS v3
—
VIR risk
6.5

Description

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products have a default administrator account, which makes it easier for remote authenticated users to obtain access via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
ibm ibmchange_and_configuration_management_database7.1
ibm ibmchange_and_configuration_management_database7.2
ibm ibmmaximo_asset_management7.1
ibm ibmmaximo_asset_management7.1.1
ibm ibmmaximo_asset_management7.1.1.1
ibm ibmmaximo_asset_management7.1.1.2
ibm ibmmaximo_asset_management7.1.1.5
ibm ibmmaximo_asset_management7.1.1.6
ibm ibmmaximo_asset_management7.1.1.7
ibm ibmmaximo_asset_management7.1.1.8
ibm ibmmaximo_asset_management7.1.1.9
ibm ibmmaximo_asset_management7.1.1.10
ibm ibmmaximo_asset_management7.1.1.11
ibm ibmmaximo_asset_management7.1.1.12
ibm ibmmaximo_asset_management7.1.1.13
ibm ibmmaximo_asset_management7.5.0.0
ibm ibmmaximo_asset_management7.5.0.1
ibm ibmmaximo_asset_management7.5.0.2
ibm ibmmaximo_asset_management7.5.0.3
ibm ibmmaximo_asset_management7.5.0.4
ibm ibmmaximo_asset_management7.5.0.5
ibm ibmmaximo_asset_management7.5.0.6
ibm ibmmaximo_asset_management7.5.0.7
ibm ibmmaximo_asset_management7.5.0.8
ibm ibmmaximo_asset_management7.5.0.9
ibm ibmmaximo_asset_management7.6.0.0
ibm ibmmaximo_asset_management7.6.0.1
ibm ibmmaximo_asset_management7.6.0.2
ibm ibmmaximo_for_government7.1
ibm ibmmaximo_for_government7.5.0.0
ibm ibmmaximo_for_government7.5.0.1
ibm ibmmaximo_for_government7.5.0.2
ibm ibmmaximo_for_government7.5.0.3
ibm ibmmaximo_for_government7.5.0.4
ibm ibmmaximo_for_government7.5.0.5
ibm ibmmaximo_for_government7.5.0.6
ibm ibmmaximo_for_life_sciences7.1
ibm ibmmaximo_for_life_sciences7.5.0.0
ibm ibmmaximo_for_life_sciences7.5.0.1
ibm ibmmaximo_for_life_sciences7.5.0.2
ibm ibmmaximo_for_life_sciences7.5.0.3
ibm ibmmaximo_for_life_sciences7.5.0.4
ibm ibmmaximo_for_life_sciences7.5.0.5
ibm ibmmaximo_for_life_sciences7.5.0.6
ibm ibmmaximo_for_nuclear_power7.1
ibm ibmmaximo_for_nuclear_power7.5.0.0
ibm ibmmaximo_for_nuclear_power7.5.0.1
ibm ibmmaximo_for_nuclear_power7.5.0.2
ibm ibmmaximo_for_nuclear_power7.5.0.3
ibm ibmmaximo_for_nuclear_power7.5.0.4
ibm ibmmaximo_for_nuclear_power7.5.0.5
ibm ibmmaximo_for_nuclear_power7.5.0.6
ibm ibmmaximo_for_oil_and_gas7.1
ibm ibmmaximo_for_oil_and_gas7.5.0.0
ibm ibmmaximo_for_oil_and_gas7.5.0.1
ibm ibmmaximo_for_oil_and_gas7.5.0.2
ibm ibmmaximo_for_oil_and_gas7.5.0.3
ibm ibmmaximo_for_oil_and_gas7.5.0.4
ibm ibmmaximo_for_oil_and_gas7.5.0.5
ibm ibmmaximo_for_oil_and_gas7.5.0.6
ibm ibmmaximo_for_transportation7.1
ibm ibmmaximo_for_transportation7.5.0.0
ibm ibmmaximo_for_transportation7.5.0.1
ibm ibmmaximo_for_transportation7.5.0.2
ibm ibmmaximo_for_transportation7.5.0.3
ibm ibmmaximo_for_transportation7.5.0.4
ibm ibmmaximo_for_transportation7.5.0.5
ibm ibmmaximo_for_transportation7.5.0.6
ibm ibmmaximo_for_utilities7.1
ibm ibmmaximo_for_utilities7.5.0.0
ibm ibmmaximo_for_utilities7.5.0.1
ibm ibmmaximo_for_utilities7.5.0.2
ibm ibmmaximo_for_utilities7.5.0.3
ibm ibmmaximo_for_utilities7.5.0.4
ibm ibmmaximo_for_utilities7.5.0.5
ibm ibmmaximo_for_utilities7.5.0.6
ibm ibmsmartcloud_control_desk7.5
ibm ibmsmartcloud_control_desk7.6
ibm ibmtivoli_asset_management_for_it7.1
ibm ibmtivoli_asset_management_for_it7.2
ibm ibmtivoli_service_request_manager7.1.0
ibm ibmtivoli_service_request_manager7.2.0.0

References

CWEs

CWE-255

💬 Discuss CVE-2015-4966 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.