CVE-2013-3971: Medium severity IBM Maximo Asset Management vulnerability
Published Oct 1, 2013
·Updated
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049.
Affected Software
17 affected components
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
IBM Maximo Asset Management=7.1.1.12
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3971?
CVE-2013-3971 has been classified as a medium severity vulnerability due to its potential impact on access control.
2
How do I fix CVE-2013-3971?
To mitigate CVE-2013-3971, update IBM Maximo Asset Management to version 7.5.0.5 or later.
3
Who is affected by CVE-2013-3971?
CVE-2013-3971 affects remote authenticated users of IBM Maximo Asset Management versions 7.1 through 7.1.1.12 and 7.5 versions before 7.5.0.5.
4
What type of vulnerability is CVE-2013-3971?
CVE-2013-3971 is an access control vulnerability that allows users to bypass intended restrictions.
5
Are there any known exploits for CVE-2013-3971?
As of now, there are no publicly known exploits targeting CVE-2013-3971.