CVE-2013-3323
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Se presenta una vulnerabilidad de escalada de privilegios en IBM Maximo Asset Management versiones 7.5, 7.1 y 6.2, cuando WebSeal con Autenticación Básica es usado, debido a un fallo al invalidar la sesión de autenticación, lo que podría permitir a un usuario malicioso obtener acceso no autorizado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-05-06 CVE Reserved
- 2020-02-18 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-269: Improper Privilege Management
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/62685 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Change And Configuration Management Database Search vendor "Ibm" for product "Change And Configuration Management Database" | 7.1 Search vendor "Ibm" for product "Change And Configuration Management Database" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Change And Configuration Management Database Search vendor "Ibm" for product "Change And Configuration Management Database" | 7.2 Search vendor "Ibm" for product "Change And Configuration Management Database" and version "7.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 6.2 Search vendor "Ibm" for product "Maximo Asset Management" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 6.2 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 7.1 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 7.5 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 6.2 Search vendor "Ibm" for product "Maximo For Government" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 7.1 Search vendor "Ibm" for product "Maximo For Government" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 7.5 Search vendor "Ibm" for product "Maximo For Government" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 6.2 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 6.4 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "6.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 6.5 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "6.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.1 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.5 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 6.2 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 6.3 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "6.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.1 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.5 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 6.2 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 6.3 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "6.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 6.4 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "6.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.1 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.5 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 6.2 Search vendor "Ibm" for product "Maximo For Transportation" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 6.3 Search vendor "Ibm" for product "Maximo For Transportation" and version "6.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.1 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.5 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 6.2 Search vendor "Ibm" for product "Maximo For Utilities" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 6.3 Search vendor "Ibm" for product "Maximo For Utilities" and version "6.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.1 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.5 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Service Desk Search vendor "Ibm" for product "Maximo Service Desk" | 6.2 Search vendor "Ibm" for product "Maximo Service Desk" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Asset Management For It Search vendor "Ibm" for product "Tivoli Asset Management For It" | 6.2 Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Asset Management For It Search vendor "Ibm" for product "Tivoli Asset Management For It" | 7.1 Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Asset Management For It Search vendor "Ibm" for product "Tivoli Asset Management For It" | 7.2 Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "7.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Service Request Manager Search vendor "Ibm" for product "Tivoli Service Request Manager" | 7.1 Search vendor "Ibm" for product "Tivoli Service Request Manager" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Service Request Manager Search vendor "Ibm" for product "Tivoli Service Request Manager" | 7.2 Search vendor "Ibm" for product "Tivoli Service Request Manager" and version "7.2" | - |
Affected
| ||||||