CVE-2014-6102
Severity Score
2.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly handle logout actions, which allows remote attackers to bypass intended Cognos BI Direct Integration access restrictions by leveraging an unattended workstation.
IBM Maximo Asset Management 7.1 hasta 7.1.1.13 y 7.5.0 anterior a 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 hasta 7.5.0.3 y 7.5.1 hasta 7.5.1.2 para SmartCloud Control Desk, y Maximo Asset Management 7.1 hasta 7.1.1.13 y 7.2 para Tivoli IT Asset Management for IT y ciertos otros productos no manejan correctamente las acciones de cierre de sesión, lo que permite a atacantes remotos evadir las restricciones de acceso a Cognos BI Direct Integration mediante el aprovechamiento de un estación de trabajo desatendida.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-09-02 CVE Reserved
- 2015-02-17 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/96141 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21695597 | 2017-09-08 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Change And Configuration Management Database Search vendor "Ibm" for product "Change And Configuration Management Database" | 7.1 Search vendor "Ibm" for product "Change And Configuration Management Database" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Change And Configuration Management Database Search vendor "Ibm" for product "Change And Configuration Management Database" | 7.2 Search vendor "Ibm" for product "Change And Configuration Management Database" and version "7.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.1 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.2 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.5 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.6 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.7 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.8 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.8" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.9 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.9" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.10 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.10" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.11 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.11" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.12 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.12" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.1.13 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.1.13" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.1.2 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.0 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.1 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.2 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.3 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.4 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.5 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.6 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5.0.10 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5.0.10" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 7.1 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 7.5.0.0 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 7.1 Search vendor "Ibm" for product "Maximo For Government" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 7.5.0.0 Search vendor "Ibm" for product "Maximo For Government" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.1 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.5.0.0 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.1 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.5.0.0 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.1 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.5.0.0 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.1 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.5.0.0 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.1 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.5.0.0 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5.0.1 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5.0.2 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5.0.3 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5.0.5 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5.0.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5.1.0 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5.1.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5.1.1 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Asset Management For It Search vendor "Ibm" for product "Tivoli Asset Management For It" | 7.1 Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Asset Management For It Search vendor "Ibm" for product "Tivoli Asset Management For It" | 7.2 Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "7.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Service Request Manager Search vendor "Ibm" for product "Tivoli Service Request Manager" | 7.1 Search vendor "Ibm" for product "Tivoli Service Request Manager" and version "7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Service Request Manager Search vendor "Ibm" for product "Tivoli Service Request Manager" | 7.2 Search vendor "Ibm" for product "Tivoli Service Request Manager" and version "7.2" | - |
Affected
| ||||||