IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 FP002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended work-order change restrictions via unspecified vectors.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21969072 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2015-11-08 03:59
Updated : 2024-02-04 18:53
NVD link : CVE-2015-7395
Mitre link : CVE-2015-7395
CVE.ORG link : CVE-2015-7395
JSON object : View
Products Affected
ibm
- maximo_for_government
- change_and_configuration_management_database
- tivoli_service_request_manager
- maximo_for_oil_and_gas
- maximo_for_utilities
- maximo_asset_management
- maximo_for_life_sciences
- maximo_for_nuclear_power
- tivoli_asset_management_for_it
- maximo_for_transportation
- smartcloud_control_desk
CWE
CWE-284
Improper Access Control