CVE-2012-0714: CSRF
Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0714?
CVE-2012-0714 is categorized as a moderate severity Cross-site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2012-0714?
To fix CVE-2012-0714, apply the latest patches and updates provided by IBM for affected software versions.
What versions are affected by CVE-2012-0714?
CVE-2012-0714 affects IBM Maximo Asset Management versions 6.2 through 7.5, as well as other related IBM software products.
What type of attack does CVE-2012-0714 allow?
CVE-2012-0714 allows remote attackers to perform Cross-site Request Forgery (CSRF) attacks, potentially leading to unauthorized actions on behalf of authenticated users.
Is CVE-2012-0714 still a concern today?
Yes, CVE-2012-0714 remains a concern for users of affected software who have not implemented the recommended updates.