CVE-2013-3323: Critical severity IBM Change and Configuration Management Database vulnerability
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2013-3323?
CVE-2013-3323 is a Privilege Escalation Vulnerability in IBM Maximo Asset Management 7.5, 7.1, and 6.2.
What is the severity of CVE-2013-3323?
CVE-2013-3323 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2013-3323?
The following versions are affected: IBM Change and Configuration Management Database 7.1, IBM Maximo Asset Management 6.2, 7.1, and 7.5, IBM Maximo Asset Management Essentials 6.2, 7.1, and 7.5, IBM Maximo For Government 6.2, 7.1, and 7.5, IBM Maximo For Life Sciences 6.2, 6.4, 6.5, 7.1, and 7.5, IBM Maximo For Nuclear Power 6.2, 6.3, 7.1, and 7.5, IBM Maximo For Oil And Gas 6.2, 6.3, 6.4, 7.1, and 7.5, IBM Maximo For Transportation 6.2, 6.3, 7.1, and 7.5, IBM Maximo For Utilities 6.2, 6.3, 7.1, and 7.5, IBM Maximo Service Desk 6.2, IBM SmartCloud Control Desk 7.5, IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2, IBM Tivoli Service Request Manager 7.1 and 7.2.
How does CVE-2013-3323 work?
CVE-2013-3323 occurs due to a failure to invalidate the authentication session when WebSeal with Basic Authentication is used in IBM Maximo Asset Management, allowing a malicious user to obtain unauthorized access.
Are there any references related to CVE-2013-3323?
Yes, you can find more information about CVE-2013-3323 at the following references: [1] http://www.securityfocus.com/bid/62685, [2] https://exchange.xforce.ibmcloud.com/vulnerabilities/77920, [3] https://www.ibm.com/support/pages/node/235239.