CVE-2015-5051

MEDIUM

IBM Maximo Asset Management 7.5-7.6 - Authenticated Access Control Bypass

Title source: llm
STIX 2.1

Description

IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query results via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21970797

Scores

CVSS v3 4.3
EPSS 0.0094
EPSS Percentile 57.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-264
Status published
Products (13)
ibm/maximo_asset_management 7.5
ibm/maximo_asset_management 7.6
ibm/maximo_asset_management_essentials 7.5
ibm/maximo_asset_management_essentials 7.6
ibm/maximo_for_government 7.5
ibm/maximo_for_life_sciences 7.5
ibm/maximo_for_life_sciences 7.6
ibm/maximo_for_nuclear_power 7.5
ibm/maximo_for_oil_and_gas 7.5
ibm/maximo_for_transportation 7.5
... and 3 more
Published Jan 03, 2016
Tracked Since Feb 18, 2026