First published: Tue Oct 01 2013(Updated: )
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5382.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Maximo Asset Management | =7.5.0.0 | |
IBM Maximo Asset Management | =7.5.0.1 | |
IBM Maximo Asset Management | =7.5.0.2 | |
IBM Maximo Asset Management | =7.5.0.3 | |
IBM Maximo Asset Management | =7.5.0.4 | |
IBM Maximo Asset Management | =6.2 | |
IBM Maximo Asset Management | =6.2.1 | |
IBM Maximo Asset Management | =6.2.2 | |
IBM Maximo Asset Management | =6.2.3 | |
IBM Maximo Asset Management | =6.2.4 | |
IBM Maximo Asset Management | =6.2.5 | |
IBM Maximo Asset Management | =6.2.6 | |
IBM Maximo Asset Management | =6.2.6.1 | |
IBM Maximo Asset Management | =6.2.7 | |
IBM Maximo Asset Management | =6.2.8 | |
IBM Maximo Asset Management | =7.1 | |
IBM Maximo Asset Management | =7.1.1 | |
IBM Maximo Asset Management | =7.1.1.1 | |
IBM Maximo Asset Management | =7.1.1.2 | |
IBM Maximo Asset Management | =7.1.1.5 | |
IBM Maximo Asset Management | =7.1.1.6 | |
IBM Maximo Asset Management | =7.1.1.7 | |
IBM Maximo Asset Management | =7.1.1.8 | |
IBM Maximo Asset Management | =7.1.1.9 | |
IBM Maximo Asset Management | =7.1.1.10 | |
IBM Maximo Asset Management | =7.1.1.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5383 is considered a high severity vulnerability due to its potential to allow privilege escalation for remote authenticated users.
To fix CVE-2013-5383, upgrade IBM Maximo Asset Management to version 7.1.1.12 or higher, or 7.5.0.5 or higher.
IBM Maximo Asset Management versions 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 are affected by CVE-2013-5383.
CVE-2013-5383 can be exploited by remote authenticated users to gain higher privileges within the system.
The impact of CVE-2013-5383 may result in unauthorized access to restricted functionality and data within IBM Maximo Asset Management.