CVEvulnerability

CVE-2015-4965

4.0 MEDIUM Published 2015-10-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-10-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-200

Description

maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to obtain sensitive information by reading a (1) backup or (2) debug application file.

Affected configurations

• ibm change and configuration management database 7.1 • ibm change and configuration management database 7.2 • ibm maximo asset management 7.1 • ibm maximo asset management 7.1.1 • ibm maximo asset management 7.1.1.1 • ibm maximo asset management 7.1.1.2 • ibm maximo asset management 7.1.1.5 • ibm maximo asset management 7.1.1.6 • ibm maximo asset management 7.1.1.7 • ibm maximo asset management 7.1.1.8 • ibm maximo asset management 7.1.1.9 • ibm maximo asset management 7.1.1.10 • ibm maximo asset management 7.1.1.11 • ibm maximo asset management 7.1.1.12 • ibm maximo asset management 7.1.1.13 • ibm maximo asset management 7.5.0.0 • ibm maximo asset management 7.5.0.1 • ibm maximo asset management 7.5.0.2 • ibm maximo asset management 7.5.0.3 • ibm maximo asset management 7.5.0.4 • ibm maximo asset management 7.5.0.5 • ibm maximo asset management 7.5.0.6 • ibm maximo asset management 7.5.0.7 • ibm maximo asset management 7.5.0.8 • ibm maximo asset management 7.6.0.0 • ibm maximo asset management essentials 7.1 • ibm maximo asset management essentials 7.5 • ibm maximo for energy optimization 7.1 • ibm maximo for government 7.1 • ibm maximo for government 7.5.0.0 • ibm maximo for government 7.5.0.1 • ibm maximo for government 7.5.0.2 • ibm maximo for government 7.5.0.3 • ibm maximo for government 7.5.0.4 • ibm maximo for government 7.5.0.5 • ibm maximo for government 7.5.0.6 • ibm maximo for life sciences 7.1 • ibm maximo for life sciences 7.5.0.0 • ibm maximo for life sciences 7.5.0.1 • ibm maximo for life sciences 7.5.0.2 • ibm maximo for life sciences 7.5.0.3 • ibm maximo for life sciences 7.5.0.4 • ibm maximo for life sciences 7.5.0.5 • ibm maximo for life sciences 7.5.0.6 • ibm maximo for nuclear power 7.1 • ibm maximo for nuclear power 7.5.0.0 • ibm maximo for nuclear power 7.5.0.1 • ibm maximo for nuclear power 7.5.0.2 • ibm maximo for nuclear power 7.5.0.3 • ibm maximo for nuclear power 7.5.0.4 • ibm maximo for nuclear power 7.5.0.5 • ibm maximo for nuclear power 7.5.0.6 • ibm maximo for oil and gas 7.1 • ibm maximo for oil and gas 7.5.0.0 • ibm maximo for oil and gas 7.5.0.1 • ibm maximo for oil and gas 7.5.0.2 • ibm maximo for oil and gas 7.5.0.3 • ibm maximo for oil and gas 7.5.0.4 • ibm maximo for oil and gas 7.5.0.5 • ibm maximo for oil and gas 7.5.0.6 … and 21 more

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References