CVE-2013-4021

Severity

65%

Complexity

80%

Confidentiality

106%

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:P).

Overview

Type

IBM Maximo Asset Management

First reported 11 years ago

2013-10-01 11:14:00

Last updated 7 years ago

2017-08-29 01:33:00

Affected Software

IBM Maximo Asset Management 7.5.0.0

7.5.0.0

IBM Maximo Asset Management 7.5.0.1

7.5.0.1

IBM Maximo Asset Management 7.5.0.2

7.5.0.2

IBM Maximo Asset Management 7.5.0.3

7.5.0.3

IBM Maximo Asset Management 7.5.0.4

7.5.0.4

IBM Maximo Asset Management 6.2

6.2

IBM Maximo Asset Management 6.2.1

6.2.1

IBM Maximo Asset Management 6.2.2

6.2.2

IBM Maximo Asset Management 6.2.3

6.2.3

IBM Maximo Asset Management 6.2.4

6.2.4

IBM Maximo Asset Management 6.2.5

6.2.5

IBM Maximo Asset Management 6.2.6

6.2.6

IBM Maximo Asset Management 6.2.6.1

6.2.6.1

IBM Maximo Asset Management 6.2.7

6.2.7

IBM Maximo Asset Management 6.2.8

6.2.8

IBM Maximo Asset Management 7.1

7.1

IBM Maximo Asset Management 7.1.1

7.1.1

IBM Maximo Asset Management 7.1.1.1

7.1.1.1

IBM Maximo Asset Management 7.1.1.2

7.1.1.2

IBM Maximo Asset Management 7.1.1.5

7.1.1.5

IBM Maximo Asset Management 7.1.1.6

7.1.1.6

IBM Maximo Asset Management 7.1.1.7

7.1.1.7

IBM Maximo Asset Management 7.1.1.8

7.1.1.8

IBM Maximo Asset Management 7.1.1.9

7.1.1.9

IBM Maximo Asset Management 7.1.1.10

7.1.1.10

IBM Maximo Asset Management 7.1.1.11

7.1.1.11

References

55068

55070

IV42816

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21651085