CVE-2016-0289: Medium severity ibm maximo asset management vulnerability
shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What are the affected versions of IBM Maximo Asset Management for CVE-2016-0289?
Affected versions include IBM Maximo Asset Management 7.1, 7.5 (up to 7.5.0.9), and 7.6 (up to 7.6.0.3).
What is the nature of the vulnerability CVE-2016-0289?
CVE-2016-0289 allows remote authenticated users to bypass intended item-selection restrictions in the SHIPREC application.
What is the severity of CVE-2016-0289?
The severity of CVE-2016-0289 is rated as medium, but can lead to significant unauthorized access to items.
How do I fix CVE-2016-0289?
To fix CVE-2016-0289, upgrade IBM Maximo Asset Management to versions 7.5.0.10 or 7.6.0.4 or later.
Can CVE-2016-0289 be exploited by remote attackers?
CVE-2016-0289 can be exploited by remote authenticated users, but not an unauthenticated remote attacker.