Lucene search

[email protected]CVE-2013-6741

HistoryMay 26, 2014 - 4:55 p.m.

CVE-2013-6741

2014-05-2616:55:03

CWE-200

[email protected]

web.nvd.nist.gov

ibm

maximo asset management

smartcloud control desk

tivoli it asset management

tivoli service request manager

maximo service desk

change and configuration management database

cve-2013-6741

stack-trace

remote authentication

information security

vulnerability

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

JSON

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837 allow remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error.

Affected configurations

NVD

Node

ibmmaximo_asset_managementMatch7.1

ibmmaximo_asset_managementMatch7.1.1

ibmmaximo_asset_managementMatch7.1.1.1

ibmmaximo_asset_managementMatch7.1.1.2

ibmmaximo_asset_managementMatch7.1.1.5

ibmmaximo_asset_managementMatch7.1.1.6

ibmmaximo_asset_managementMatch7.1.1.7

Node

ibmchange_and_configuration_management_databaseMatch7.1.1.7

ibmmaximo_service_deskMatch7.1.1.7

ibmtivoli_asset_management_for_itMatch7.0

ibmtivoli_asset_management_for_itMatch7.1

ibmtivoli_it_asset_management_for_itMatch7.1.1.7

ibmtivoli_service_request_managerMatch7.0

ibmtivoli_service_request_managerMatch7.1.0.0

ibmtivoli_service_request_managerMatch7.1.1

ibmtivoli_service_request_managerMatch7.1.1.7

Node

ibmmaximo_asset_managementMatch7.5.0.0

ibmmaximo_asset_managementMatch7.5.0.1

ibmmaximo_asset_managementMatch7.5.0.2

ibmmaximo_asset_managementMatch7.5.0.3

ibmmaximo_asset_managementMatch7.5.0.4

ibmmaximo_asset_managementMatch7.5.0.5

Node

ibmsmartcloud_control_deskMatch7.0

ibmsmartcloud_control_deskMatch7.5

ibmsmartcloud_control_deskMatch7.5.0.0

ibmsmartcloud_control_deskMatch7.5.0.1

ibmsmartcloud_control_deskMatch7.5.0.2

ibmsmartcloud_control_deskMatch7.5.1.0

ibmsmartcloud_control_deskMatch7.5.1.1

CPENameOperatorVersion
ibm:maximo_asset_managementibm maximo asset managementeq7.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.2
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.5
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.6
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.7

CPE	Name	Operator	Version
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.2
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.5
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.6
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.7

References

www-01.ibm.com/support/docview.wss?uid=swg1IV50316

www-01.ibm.com/support/docview.wss?uid=swg21670870

exchange.xforce.ibmcloud.com/vulnerabilities/89857

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

JSON

Related for CVE-2013-6741

prion1 cvelist1 nvd1 ibm1