maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to obtain sensitive information by reading a (1) backup or (2) debug application file.
References
| Link | Resource |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21966194 | Vendor Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg21966194 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg21966194 - Vendor Advisory |
Information
Published : 2015-10-06 01:59
Updated : 2024-11-21 02:32
NVD link : CVE-2015-4965
Mitre link : CVE-2015-4965
CVE.ORG link : CVE-2015-4965
JSON object : View
Products Affected
ibm
- maximo_for_transportation
- smartcloud_control_desk
- change_and_configuration_management_database
- maximo_for_nuclear_power
- tivoli_asset_management_for_it
- maximo_asset_management
- maximo_for_utilities
- tivoli_service_request_manager
- maximo_for_oil_and_gas
- maximo_for_government
- maximo_for_life_sciences
- maximo_for_energy_optimization
- maximo_asset_management_essentials
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor