CVE-2015-1951: Infoleak

First published: Wed Jul 01 2015(Updated: )

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.0 IFIX005 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation.

Credit: psirt@us.ibm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/author
• agent/weakness
• agent/last-modified-date
• agent/severity
• agent/tags
• agent/first-publish-date
• agent/description
• agent/event
• agent/source
• vendor/ibm
• canonical/ibm maximo asset management
• version/ibm maximo asset management/7.1
• version/ibm maximo asset management/7.1.1
• version/ibm maximo asset management/7.1.1.1
• version/ibm maximo asset management/7.1.1.2
• version/ibm maximo asset management/7.1.1.5
• version/ibm maximo asset management/7.1.1.6
• version/ibm maximo asset management/7.1.1.7
• version/ibm maximo asset management/7.1.1.8
• version/ibm maximo asset management/7.1.1.9
• version/ibm maximo asset management/7.1.1.10
• version/ibm maximo asset management/7.1.1.11
• version/ibm maximo asset management/7.1.1.12
• version/ibm maximo asset management/7.1.1.13
• version/ibm maximo asset management/7.5.0.0
• version/ibm maximo asset management/7.5.0.1
• version/ibm maximo asset management/7.5.0.2
• version/ibm maximo asset management/7.5.0.3
• version/ibm maximo asset management/7.5.0.4
• version/ibm maximo asset management/7.5.0.5
• version/ibm maximo asset management/7.5.0.6
• version/ibm maximo asset management/7.5.0.7
• version/ibm maximo asset management/7.5.0.8
• version/ibm maximo asset management/7.6.0.0