CVE-2012-6356

IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IV27329
http://www-01.ibm.com/support/docview.wss?uid=swg21625624	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80748

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:::::::*
	cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:::::::*
	cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:::::::*

History

No history.

Information

Published : 2013-02-20 12:09

Updated : 2024-02-04 18:16

NVD link : CVE-2012-6356

Mitre link : CVE-2012-6356

CVE.ORG link : CVE-2012-6356

JSON object : View

Products Affected

ibm

maximo_asset_management
smartcloud_control_desk
maximo_asset_management_essentials

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2012-6356", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-02-20T12:09:22.520", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV27329", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21625624", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80748", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation."}, {"lang": "es", "value": "IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, y SmartCloud Control Desk 7.5 permite a usuarios remotos autenticados para obtener privilegios a trav\u00e9s de vectores relacionados con una operaci\u00f3n de importaci\u00f3n."}], "lastModified": "2017-08-29T01:32:56.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B590C42-21A1-4C62-8293-5A0D7AD628E4"}, {"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCA89D39-C008-49CD-9D1E-7109644970AB"}, {"criteria": "cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83265FEF-C0CF-47B9-9A62-020897AABC5F"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}