CVE-2013-3049: Medium severity IBM Maximo Asset Management vulnerability
Published Oct 1, 2013
·Updated
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971.
Affected Software
17 affected components
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
IBM Maximo Asset Management=7.1.1.12
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3049?
CVE-2013-3049 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2013-3049?
To fix CVE-2013-3049, upgrade to IBM Maximo Asset Management version 7.5.0.5 or later.
3
What versions of IBM Maximo Asset Management are affected by CVE-2013-3049?
CVE-2013-3049 affects IBM Maximo Asset Management versions 7.1, 7.1.1.12 and all 7.5 versions prior to 7.5.0.5.
4
Can CVE-2013-3049 be exploited by unauthenticated users?
No, CVE-2013-3049 can only be exploited by remote authenticated users.
5
Is CVE-2013-3049 related to any other vulnerabilities?
CVE-2013-3049 is a different vulnerability than CVE-2013-3971.