PT-2014-6107 · Ibm · Ibm Maximo Asset Management

Published 2014-10-02 · Updated 2017-08-29 · CVE-2014-4765

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.1.1.13 IBM Maximo Asset Management versions 7.5 through 7.5.0.6 IBM Maximo Asset Management versions 7.5.0 through 7.5.0.3 for SmartCloud Control Desk IBM Maximo Asset Management versions 7.5.1 through 7.5.1.2 for SmartCloud Control Desk IBM Maximo Asset Management version 7.1 for Tivoli IT Asset Management for IT IBM Maximo Asset Management version 7.2 for Tivoli IT Asset Management for IT

Description The issue allows remote attackers to obtain sensitive directory information by reading an unspecified error message.

Recommendations For IBM Maximo Asset Management versions 7.1 through 7.1.1.13, update to a version outside of this range. For IBM Maximo Asset Management versions 7.5 through 7.5.0.6, update to a version outside of this range. For IBM Maximo Asset Management versions 7.5.0 through 7.5.0.3 for SmartCloud Control Desk, update to a version outside of this range. For IBM Maximo Asset Management versions 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, update to a version outside of this range. For IBM Maximo Asset Management version 7.1 for Tivoli IT Asset Management for IT, update to a version outside of this range. For IBM Maximo Asset Management version 7.2 for Tivoli IT Asset Management for IT, update to a version outside of this range.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-4765

Affected Products

Ibm Maximo Asset Management

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21685289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4765 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94757 · Note