IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 6.0 | MEDIUM | AV:N/AC:M/Au:S/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV53952 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg21670870 | psirt@us.ibm.com | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/90738 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV53952 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg21670870 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/90738 | af854a3a-2127-422b-91ae-364da2661108 | N/A |