PT-2014-3185 · Ibm · Maximo Service Desk+5

Publicado

2014-05-26

·

Atualizado

2017-08-29

·

CVE-2013-6741

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837 IBM Maximo Asset Management versions 7.5.0.0 through 7.5.0.5 before IFIX006 SmartCloud Control Desk versions 7.0.0 through 7.5.0.3 SmartCloud Control Desk versions 7.5.1.0 through 7.5.1.2 Tivoli IT Asset Management for IT versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837 Tivoli Service Request Manager versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837 Maximo Service Desk versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837 Change and Configuration Management Database (CCMDB) versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837
Description The issue allows remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error.
Recommendations For IBM Maximo Asset Management versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837, apply the LAFIX.20140319-0837 patch. For IBM Maximo Asset Management versions 7.5.0.0 through 7.5.0.5 before IFIX006, apply the IFIX006 patch. For SmartCloud Control Desk versions 7.0.0 through 7.5.0.3, update to version 7.5.0.3 or later. For SmartCloud Control Desk versions 7.5.1.0 through 7.5.1.2, update to version 7.5.1.2 or later. For Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837, apply the LAFIX.20140319-0837 patch.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-6741

Produtos afetados

Change/Configuration Management Database
Ibm Maximo Asset Management
Maximo Service Desk
Smartcloud Control Desk
Tivoli Asset Management For It
Tivoli Service Request Manager