CVE-2015-7452

MEDIUM · 4.3 CVSS Gepubliceerd: 02-01-2016 CWE-200

Beschrijving NL

IBM Maximo Asset Management 7.5 vóór 7.5.0.9 FP9 en 7.6 vóór 7.6.0.3 FP3 en Maximo Asset Management 7.5 vóór 7.5.0.9 FP9, 7.5.1 en 7.6 vóór 7.6.0.3 FP3 voor SmartCloud Control Desk staan op afstand geverifieerde gebruikers toe om gevoelige informatie te verkrijgen via de REST API.

Origineel (Engels) tonen

IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive information via the REST API.

Vendors

Ibm

Affected products

Maximo Asset Management Maximo Asset Management Essentials Maximo For Government Maximo For Life Sciences Maximo For Nuclear Power Maximo For Oil And Gas Maximo For Transportation Maximo For Utilities Smartcloud Control Desk

References

www-01.ibm.com