Lucene search
HistoryFeb 20, 2013 - 12:09 p.m.
CVE-2012-6357
ibm
maximo
asset management
smartcloud control desk
cve-2012-6357
nvd
security
privileges
bypass
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.7%
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors.
Affected configurations
Node
ibmmaximo_asset_managementMatch7.5.0.0
ORibmmaximo_asset_management_essentialsMatch7.5.0.0
ORibmsmartcloud_control_deskMatch7.5.0.0
Related
prion
prion
Design/Logic Flaw
2013-02-20 12:09:00
cvelist
cvelist
CVE-2012-6357
2013-02-20 11:00:00
nvd
nvd
CVE-2012-6357
2013-02-20 12:09:22
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.7%
Related for CVE-2012-6357