First published: Mon Apr 24 2017(Updated: )
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to conduct directory traversal attacks via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Change And Configuration Management Database | =7.1 | |
Ibm Change And Configuration Management Database | =7.2 | |
IBM Maximo Asset Management | =7.1 | |
IBM Maximo Asset Management | =7.1.1 | |
IBM Maximo Asset Management | =7.1.1.1 | |
IBM Maximo Asset Management | =7.1.1.2 | |
IBM Maximo Asset Management | =7.1.1.5 | |
IBM Maximo Asset Management | =7.1.1.6 | |
IBM Maximo Asset Management | =7.1.1.7 | |
IBM Maximo Asset Management | =7.1.1.8 | |
Ibm Maximo Asset Management Essentials | =7.1 | |
Ibm Maximo For Government | =7.1 | |
Ibm Maximo For Life Sciences | =7.1 | |
Ibm Maximo For Nuclear Power | =7.1 | |
Ibm Maximo For Oil And Gas | =7.1 | |
Ibm Maximo For Transportation | =7.1 | |
Ibm Maximo For Utilities | =7.1 | |
IBM Tivoli Asset Management for IT | =7.1 | |
IBM Tivoli Asset Management for IT | =7.2 | |
Ibm Tivoli Service Request Manager | =7.1 | |
Ibm Tivoli Service Request Manager | =7.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0107 is rated as high severity due to the potential for remote code execution.
To fix CVE-2015-0107, users should update affected IBM software to the latest version or apply the provided patches.
CVE-2015-0107 affects IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and various Maximo Asset Management versions prior to their respective fixes.
Yes, CVE-2015-0107 can be exploited remotely, allowing attackers to execute arbitrary code on the vulnerable systems.
If you cannot update your software, consider implementing additional security measures such as firewalls or access controls to mitigate the risk.