CVE-2012-6355
IBM Maximo Asset Management 6.2-7.5 - Authenticated Privilege Escalation via Work Order
Title source: llmDescription
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21625624
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80747
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
Scores
EPSS
0.0123
EPSS Percentile
65.8%
Details
CWE
CWE-264
Status
published
Products (35)
ibm/change_and_configuration_management_database
7.1.
ibm/change_and_configuration_management_database
7.2.0
ibm/maximo_asset_management
6.2
ibm/maximo_asset_management
6.2.1
ibm/maximo_asset_management
6.2.2
ibm/maximo_asset_management
6.2.3
ibm/maximo_asset_management
6.2.4
ibm/maximo_asset_management
6.2.5
ibm/maximo_asset_management
6.2.6
ibm/maximo_asset_management
6.2.6.1
... and 25 more
Published
Feb 20, 2013
Tracked Since
Feb 18, 2026