CVE-2012-2185: Infoleak
IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2185?
CVE-2012-2185 has been assigned a medium severity rating due to its potential to allow remote authenticated users to access sensitive information.
How do I fix CVE-2012-2185?
To fix CVE-2012-2185, apply the latest patches released by IBM for affected versions of their software.
Which software versions are affected by CVE-2012-2185?
CVE-2012-2185 affects IBM Maximo Asset Management versions 6.2 through 7.5, as well as several related IBM platforms such as Tivoli and SmartCloud Control Desk.
Who is at risk with CVE-2012-2185?
Remote authenticated users of the affected IBM software are at risk of being able to access sensitive information due to CVE-2012-2185.
Is CVE-2012-2185 part of a larger vulnerability trend?
Yes, CVE-2012-2185 highlights ongoing vulnerabilities in enterprise software that can expose sensitive data when proper authentication controls are not enforced.