CVE-2015-1933: Infoleak
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not have an off autocomplete attribute for the password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1933?
CVE-2015-1933 is classified as a moderate severity vulnerability affecting certain versions of IBM Maximo Asset Management.
How do I fix CVE-2015-1933?
To fix CVE-2015-1933, you should upgrade to the specified patched versions of IBM Maximo Asset Management or apply the available fixes.
Which IBM Maximo Asset Management versions are affected by CVE-2015-1933?
CVE-2015-1933 affects IBM Maximo Asset Management versions 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001.
Is CVE-2015-1933 specific to any particular IBM products?
Yes, CVE-2015-1933 specifically impacts IBM products including Maximo Asset Management, SmartCloud Control Desk, and Tivoli IT Asset Management.
What potential impact does CVE-2015-1933 pose to my system?
CVE-2015-1933 may allow unauthorized access to sensitive information, potentially leading to data breaches or system compromise.