CVE-2013-5380: Infoleak
Published Oct 1, 2013
·Updated
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive information via unspecified vectors.
Affected Software
26 affected components
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
IBM Maximo Asset Management=6.2
IBM Maximo Asset Management=6.2.1
IBM Maximo Asset Management=6.2.2
IBM Maximo Asset Management=6.2.3
IBM Maximo Asset Management=6.2.4
IBM Maximo Asset Management=6.2.5
IBM Maximo Asset Management=6.2.6
IBM Maximo Asset Management=6.2.6.1
IBM Maximo Asset Management=6.2.7
IBM Maximo Asset Management=6.2.8
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5380?
CVE-2013-5380 is classified as a medium severity vulnerability.
2
How do I fix CVE-2013-5380?
To fix CVE-2013-5380, update IBM Maximo Asset Management to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2013-5380?
CVE-2013-5380 affects local users of IBM Maximo Asset Management versions 6.2 through 6.2.8, and 7.1 prior to 7.1.1.12, and 7.5 prior to 7.5.0.5.
4
What type of information can be obtained through CVE-2013-5380?
CVE-2013-5380 allows local users to obtain sensitive information, though the specific vectors are unspecified.
5
When was CVE-2013-5380 disclosed?
CVE-2013-5380 was disclosed in August 2013.