CVEvulnerability
CVE-2015-7395
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-11-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-284
Description
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 FP002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended work-order change restrictions via unspecified vectors.
Affected configurations
• ibm change and configuration management database 7.1
• ibm change and configuration management database 7.2
• ibm maximo asset management 7.1
• ibm maximo asset management 7.1.1
• ibm maximo asset management 7.1.1.1
• ibm maximo asset management 7.1.1.2
• ibm maximo asset management 7.1.1.5
• ibm maximo asset management 7.1.1.6
• ibm maximo asset management 7.1.1.7
• ibm maximo asset management 7.1.1.8
• ibm maximo asset management 7.1.1.9
• ibm maximo asset management 7.1.1.10
• ibm maximo asset management 7.1.1.11
• ibm maximo asset management 7.1.1.12
• ibm maximo asset management 7.1.1.13
• ibm maximo asset management 7.5.0.0
• ibm maximo asset management 7.5.0.1
• ibm maximo asset management 7.5.0.2
• ibm maximo asset management 7.5.0.3
• ibm maximo asset management 7.5.0.4
• ibm maximo asset management 7.5.0.5
• ibm maximo asset management 7.5.0.6
• ibm maximo asset management 7.5.0.7
• ibm maximo asset management 7.5.0.8
• ibm maximo asset management 7.5.0.9
• ibm maximo asset management 7.6.0.0
• ibm maximo asset management 7.6.0.1
• ibm maximo asset management 7.6.0.2
• ibm maximo for government 7.1
• ibm maximo for government 7.5.0.0
• ibm maximo for government 7.5.0.1
• ibm maximo for government 7.5.0.2
• ibm maximo for government 7.5.0.3
• ibm maximo for government 7.5.0.4
• ibm maximo for government 7.5.0.5
• ibm maximo for government 7.5.0.6
• ibm maximo for life sciences 7.1
• ibm maximo for life sciences 7.5.0.0
• ibm maximo for life sciences 7.5.0.1
• ibm maximo for life sciences 7.5.0.2
• ibm maximo for life sciences 7.5.0.3
• ibm maximo for life sciences 7.5.0.4
• ibm maximo for life sciences 7.5.0.5
• ibm maximo for life sciences 7.5.0.6
• ibm maximo for nuclear power 7.1
• ibm maximo for nuclear power 7.5.0.0
• ibm maximo for nuclear power 7.5.0.1
• ibm maximo for nuclear power 7.5.0.2
• ibm maximo for nuclear power 7.5.0.3
• ibm maximo for nuclear power 7.5.0.4
• ibm maximo for nuclear power 7.5.0.5
• ibm maximo for nuclear power 7.5.0.6
• ibm maximo for oil and gas 7.1
• ibm maximo for oil and gas 7.5.0.0
• ibm maximo for oil and gas 7.5.0.1
• ibm maximo for oil and gas 7.5.0.2
• ibm maximo for oil and gas 7.5.0.3
• ibm maximo for oil and gas 7.5.0.4
• ibm maximo for oil and gas 7.5.0.5
• ibm maximo for oil and gas 7.5.0.6
… and 22 more
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21969072 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21969072 Vendor Advisory