CVE-2015-7487

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.1 MEDIUM
LOCAL
HIGH
HIGH
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
ibmchange_and_configuration_management_database
7.1
ibmchange_and_configuration_management_database
7.2
ibmmaximo_asset_management
7.1
ibmmaximo_asset_management
7.1.1
ibmmaximo_asset_management
7.1.1.1
ibmmaximo_asset_management
7.1.1.2
ibmmaximo_asset_management
7.1.1.5
ibmmaximo_asset_management
7.1.1.6
ibmmaximo_asset_management
7.1.1.7
ibmmaximo_asset_management
7.1.1.8
ibmmaximo_asset_management
7.1.1.9
ibmmaximo_asset_management
7.1.1.10
ibmmaximo_asset_management
7.1.1.11
ibmmaximo_asset_management
7.1.1.12
ibmmaximo_asset_management
7.1.1.13
ibmmaximo_asset_management
7.5
ibmmaximo_asset_management
7.5.0.0
ibmmaximo_asset_management
7.5.0.1
ibmmaximo_asset_management
7.5.0.2
ibmmaximo_asset_management
7.5.0.3
ibmmaximo_asset_management
7.5.0.4
ibmmaximo_asset_management
7.5.0.5
ibmmaximo_asset_management
7.5.0.6
ibmmaximo_asset_management
7.5.0.7
ibmmaximo_asset_management
7.5.0.8
ibmmaximo_asset_management
7.5.0.9
ibmmaximo_asset_management
7.6
ibmmaximo_asset_management
7.6.0.0
ibmmaximo_asset_management
7.6.0.1
ibmmaximo_asset_management
7.6.0.2
ibmmaximo_asset_management
7.6.0.3
ibmmaximo_asset_management_essentials
7.5.0.0
ibmmaximo_asset_management_essentials
7.5.0.1
ibmmaximo_asset_management_essentials
7.5.0.2
ibmmaximo_asset_management_essentials
7.5.0.3
ibmmaximo_asset_management_essentials
7.5.0.4
ibmmaximo_asset_management_essentials
7.5.0.5
ibmmaximo_asset_management_essentials
7.5.0.6
ibmmaximo_asset_management_essentials
7.5.0.7
ibmmaximo_asset_management_essentials
7.5.0.8
ibmmaximo_for_energy_optimization
7.1
ibmmaximo_for_government
7.1
ibmmaximo_for_government
7.5
ibmmaximo_for_life_sciences
7.1
ibmmaximo_for_life_sciences
7.5
ibmmaximo_for_nuclear_power
7.1
ibmmaximo_for_nuclear_power
7.5
ibmmaximo_for_oil_and_gas
7.1
ibmmaximo_for_oil_and_gas
7.5
ibmmaximo_for_transportation
7.1
ibmmaximo_for_transportation
7.5
ibmmaximo_for_utilities
7.1
ibmmaximo_for_utilities
7.5
ibmsmartcloud_control_desk
7.5.1.0
ibmsmartcloud_control_desk
7.6
ibmtivoli_asset_management_for_it
7.1
ibmtivoli_asset_management_for_it
7.2
ibmtivoli_service_request_manager
7.1.0
ibmtivoli_service_request_manager
7.2
𝑥
= Vulnerable software versions