CVE-2013-3323
18.02.2020, 17:15
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | change_and_configuration_management_database | 7.1 |
| ibm | change_and_configuration_management_database | 7.2 |
| ibm | maximo_asset_management | 6.2 |
| ibm | maximo_asset_management | 7.1 |
| ibm | maximo_asset_management | 7.5 |
| ibm | maximo_asset_management_essentials | 6.2 |
| ibm | maximo_asset_management_essentials | 7.1 |
| ibm | maximo_asset_management_essentials | 7.5 |
| ibm | maximo_for_government | 6.2 |
| ibm | maximo_for_government | 7.1 |
| ibm | maximo_for_government | 7.5 |
| ibm | maximo_for_life_sciences | 6.2 |
| ibm | maximo_for_life_sciences | 6.4 |
| ibm | maximo_for_life_sciences | 6.5 |
| ibm | maximo_for_life_sciences | 7.1 |
| ibm | maximo_for_life_sciences | 7.5 |
| ibm | maximo_for_nuclear_power | 6.2 |
| ibm | maximo_for_nuclear_power | 6.3 |
| ibm | maximo_for_nuclear_power | 7.1 |
| ibm | maximo_for_nuclear_power | 7.5 |
| ibm | maximo_for_oil_and_gas | 6.2 |
| ibm | maximo_for_oil_and_gas | 6.3 |
| ibm | maximo_for_oil_and_gas | 6.4 |
| ibm | maximo_for_oil_and_gas | 7.1 |
| ibm | maximo_for_oil_and_gas | 7.5 |
| ibm | maximo_for_transportation | 6.2 |
| ibm | maximo_for_transportation | 6.3 |
| ibm | maximo_for_transportation | 7.1 |
| ibm | maximo_for_transportation | 7.5 |
| ibm | maximo_for_utilities | 6.2 |
| ibm | maximo_for_utilities | 6.3 |
| ibm | maximo_for_utilities | 7.1 |
| ibm | maximo_for_utilities | 7.5 |
| ibm | maximo_service_desk | 6.2 |
| ibm | smartcloud_control_desk | 7.5 |
| ibm | tivoli_asset_management_for_it | 6.2 |
| ibm | tivoli_asset_management_for_it | 7.1 |
| ibm | tivoli_asset_management_for_it | 7.2 |
| ibm | tivoli_service_request_manager | 7.1 |
| ibm | tivoli_service_request_manager | 7.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References