CVE-2015-5051: Medium severity ibm maximo asset management vulnerability

Published Jan 3, 2016

Updated

IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query results via unspecified vectors.

Affected Software

13 affected components

IBM Maximo Asset Management=7.5

IBM Maximo Asset Management=7.6

IBM Maximo Asset Management Essentials=7.5

IBM Maximo Asset Management Essentials=7.6

IBM Maximo for Government=7.5

IBM Maximo for Life Sciences=7.5

IBM Maximo for Life Sciences=7.6

IBM Maximo for Nuclear Power=7.5

IBM Maximo for Oil and Gas=7.5

IBM Maximo for Transportation=7.5

IBM Maximo for Utilities=7.5

IBM SmartCloud Control Desk=7.5

IBM SmartCloud Control Desk=7.6

Event History

Jan 3, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-5051?

CVE-2015-5051 has a medium severity rating, as it allows remote authenticated users to bypass access restrictions.

How do I fix CVE-2015-5051?

To mitigate CVE-2015-5051, update IBM Maximo Asset Management to version 7.5.0.8 IF6 or 7.6.0.2 IF1.

Which versions of IBM products are affected by CVE-2015-5051?

CVE-2015-5051 affects IBM Maximo Asset Management versions 7.5 prior to 7.5.0.8 IF6 and 7.6 prior to 7.6.0.2 IF1.

What types of users can exploit CVE-2015-5051?

Remote authenticated users can exploit CVE-2015-5051 to bypass access restrictions on query results.

Can CVE-2015-5051 affect IBM SmartCloud Control Desk?

Yes, CVE-2015-5051 also affects IBM SmartCloud Control Desk versions before 7.6.0.2 IF1.