CVE-2015-0104

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to execute arbitrary code via unspecified vectors.
References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21694974 Patch Vendor Advisory
http://www.securityfocus.com/bid/97999 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-04-24 06:59

Updated : 2024-02-28 15:44


NVD link : CVE-2015-0104

Mitre link : CVE-2015-0104

CVE.ORG link : CVE-2015-0104


JSON object : View

Products Affected

ibm

  • tivoli_service_request_manager
  • maximo_asset_management_essentials
  • maximo_for_utilities
  • maximo_asset_management
  • maximo_for_government
  • maximo_for_transportation
  • maximo_for_life_sciences
  • maximo_for_oil_and_gas
  • change_and_configuration_management_database
  • maximo_for_nuclear_power
  • tivoli_asset_management_for_it
CWE
CWE-284

Improper Access Control