Description
IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21976949
Scores
CVSS v3
4.3
EPSS
0.0078
EPSS Percentile
51.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-284
Status
published
Products (11)
ibm/maximo_asset_management
7.6.0.0
ibm/maximo_asset_management
7.6.0.1
ibm/maximo_asset_management
7.6.0.2
ibm/maximo_asset_management
7.6.0.3
ibm/maximo_for_government
ibm/maximo_for_life_sciences
ibm/maximo_for_nuclear_power
ibm/maximo_for_oil_and_gas
ibm/maximo_for_transportation
ibm/maximo_for_utilities
... and 1 more
Published
Mar 14, 2016
Tracked Since
Feb 18, 2026