IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:57
Type | Values Removed | Values Added |
---|---|---|
References | () http://www-01.ibm.com/support/docview.wss?uid=swg1IV46745 - | |
References | () http://www-01.ibm.com/support/docview.wss?uid=swg21670870 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/88308 - |
Information
Published : 2014-05-26 16:55
Updated : 2024-11-21 01:57
NVD link : CVE-2013-5460
Mitre link : CVE-2013-5460
CVE.ORG link : CVE-2013-5460
JSON object : View
Products Affected
ibm
- smartcloud_control_desk
- maximo_asset_management
CWE
CWE-264
Permissions, Privileges, and Access Controls