IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to conduct directory traversal attacks via unspecified vectors.
References
| Link | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21694974 | Vendor Advisory |
| http://www.securityfocus.com/bid/97998 | Third Party Advisory VDB Entry |
| http://www-01.ibm.com/support/docview.wss?uid=swg21694974 | Vendor Advisory |
| http://www.securityfocus.com/bid/97998 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg21694974 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/97998 - Third Party Advisory, VDB Entry |
Information
Published : 2017-04-24 06:59
Updated : 2024-11-21 02:22
NVD link : CVE-2015-0107
Mitre link : CVE-2015-0107
CVE.ORG link : CVE-2015-0107
JSON object : View
Products Affected
ibm
- maximo_for_oil_and_gas
- tivoli_asset_management_for_it
- maximo_for_life_sciences
- maximo_for_transportation
- tivoli_service_request_manager
- maximo_for_utilities
- change_and_configuration_management_database
- maximo_for_government
- maximo_asset_management_essentials
- maximo_asset_management
- maximo_for_nuclear_power
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')