CVE-2013-3972: Infoleak
Published Oct 1, 2013
·Updated
IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected Software
16 affected components
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3972?
CVE-2013-3972 is classified as a medium severity vulnerability.
2
How do I fix CVE-2013-3972?
To fix CVE-2013-3972, upgrade IBM Maximo Asset Management to version 7.1.1.12 or 7.5.0.5 or later.
3
Who is affected by CVE-2013-3972?
CVE-2013-3972 affects IBM Maximo Asset Management versions 7.1, 7.1.1.x, and 7.5 versions prior to 7.5.0.5.
4
What types of information can be accessed through CVE-2013-3972?
CVE-2013-3972 allows remote authenticated users to access sensitive information, although the specific vectors are unspecified.
5
What is IBM Maximo Asset Management?
IBM Maximo Asset Management is a software solution for managing assets and work processes across various sectors.