Code injection

2016-01-0221:59:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.3%

JSON

The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors.

CPENameOperatorVersion
maximo_asset_managementeq7.5
maximo_asset_managementeq7.6
maximo_asset_management_essentialseq7.5
maximo_for_governmenteq7.5
maximo_for_life_scienceseq7.6
maximo_for_life_scienceseq7.5
maximo_for_nuclear_powereq7.5
maximo_for_oil_and_gaseq7.5
maximo_for_transportationeq7.5
maximo_for_utilitieseq7.5

Name	Operator	Version
maximo_asset_management	eq	7.5
maximo_asset_management	eq	7.6
maximo_asset_management_essentials	eq	7.5
maximo_for_government	eq	7.5
maximo_for_life_sciences	eq	7.6
maximo_for_life_sciences	eq	7.5
maximo_for_nuclear_power	eq	7.5
maximo_for_oil_and_gas	eq	7.5
maximo_for_transportation	eq	7.5
maximo_for_utilities	eq	7.5