CVE-2016-0222: Medium severity ibm maximo asset management vulnerability
Published Mar 14, 2016
·Updated
IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors.
Affected Software
11 affected components
IBM Maximo Asset Management=7.6.0.0
IBM Maximo Asset Management=7.6.0.1
IBM Maximo Asset Management=7.6.0.2
IBM Maximo Asset Management=7.6.0.3
IBM SmartCloud Control Desk
IBM Maximo for Government
IBM Maximo for Life Sciences
IBM Maximo for Nuclear Power
IBM Maximo for Oil and Gas
IBM Maximo for Transportation
IBM Maximo for Utilities
Event History
Mar 14, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0222?
CVE-2016-0222 is classified as a moderate severity vulnerability that allows remote authenticated users to bypass access restrictions.
2
How do I fix CVE-2016-0222?
To fix CVE-2016-0222, upgrade IBM Maximo Asset Management to version 7.6.0.3 IFIX001 or later.
3
Who is affected by CVE-2016-0222?
CVE-2016-0222 affects versions 7.6.0.0 to 7.6.0.2 of IBM Maximo Asset Management.
4
What is the impact of CVE-2016-0222?
The impact of CVE-2016-0222 is that it allows users to read arbitrary purchase-order work logs, potentially exposing sensitive information.
5
Can CVE-2016-0222 be exploited remotely?
Yes, CVE-2016-0222 can be exploited by remote authenticated users to bypass access restrictions.