CVE-2015-7452

Опубликовано: 02 янв. 2016

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow remote authenticated users to obtain sensitive information via the REST API.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21972463
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21972463
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:smartcloud_control_desk:7.6:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00155

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-f9w9-rx69-v67p