CVEvulnerability

CVE-2013-3323

9.8 CRITICAL Published 2020-02-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2020-02-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-269

Description

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Affected configurations

• ibm change and configuration management database 7.1 • ibm change and configuration management database 7.2 • ibm maximo asset management 6.2 • ibm maximo asset management 7.1 • ibm maximo asset management 7.5 • ibm maximo asset management essentials 6.2 • ibm maximo asset management essentials 7.1 • ibm maximo asset management essentials 7.5 • ibm maximo for government 6.2 • ibm maximo for government 7.1 • ibm maximo for government 7.5 • ibm maximo for life sciences 6.2 • ibm maximo for life sciences 6.4 • ibm maximo for life sciences 6.5 • ibm maximo for life sciences 7.1 • ibm maximo for life sciences 7.5 • ibm maximo for nuclear power 6.2 • ibm maximo for nuclear power 6.3 • ibm maximo for nuclear power 7.1 • ibm maximo for nuclear power 7.5 • ibm maximo for oil and gas 6.2 • ibm maximo for oil and gas 6.3 • ibm maximo for oil and gas 6.4 • ibm maximo for oil and gas 7.1 • ibm maximo for oil and gas 7.5 • ibm maximo for transportation 6.2 • ibm maximo for transportation 6.3 • ibm maximo for transportation 7.1 • ibm maximo for transportation 7.5 • ibm maximo for utilities 6.2 • ibm maximo for utilities 6.3 • ibm maximo for utilities 7.1 • ibm maximo for utilities 7.5 • ibm maximo service desk 6.2 • ibm smartcloud control desk 7.5 • ibm tivoli asset management for it 6.2 • ibm tivoli asset management for it 7.1 • ibm tivoli asset management for it 7.2 • ibm tivoli service request manager 7.1 • ibm tivoli service request manager 7.2

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References