PT-2015-5510 · Ibm · Smartcloud Control Desk+2
Published
2015-10-04
·
Updated
2015-10-05
·
CVE-2015-1934
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Maximo Asset Management versions 7.1 through 7.1.1.13
IBM Maximo Asset Management versions 7.5.0 before 7.5.0.8 IFIX002
IBM Maximo Asset Management versions 7.6.0 before 7.6.0.1 IFIX001
IBM Maximo Asset Management versions 7.5.x before 7.5.0.8 IFIX002 for SmartCloud Control Desk
IBM Maximo Asset Management versions 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk
IBM Maximo Asset Management versions 7.1 through 7.1.1.13 for Tivoli IT Asset Management for IT
IBM Maximo Asset Management version 7.2 for Tivoli IT Asset Management for IT
Description
The issue is related to improper password encryption, making it easier for attackers with access to a password file to determine cleartext passwords.
Recommendations
For versions 7.1 through 7.1.1.13, update to a version after 7.1.1.13.
For versions 7.5.0 before 7.5.0.8 IFIX002, apply IFIX002 or update to a version after 7.5.0.8 IFIX002.
For versions 7.6.0 before 7.6.0.1 IFIX001, apply IFIX001 or update to a version after 7.6.0.1 IFIX001.
For SmartCloud Control Desk versions 7.5.x before 7.5.0.8 IFIX002, apply IFIX002 or update to a version after 7.5.0.8 IFIX002.
For SmartCloud Control Desk versions 7.6.0 before 7.6.0.1 IFIX001, apply IFIX001 or update to a version after 7.6.0.1 IFIX001.
For Tivoli IT Asset Management for IT version 7.2, update to a version after 7.2.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Maximo Asset Management
Smartcloud Control Desk
Tivoli Asset Management For It