CVE-2015-7396
Severity Score
5.4
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors.
El Scheduler en IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.8 IF6 y 7.6 en versiones anteriores a 7.6.0.1 FP1 y Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.8 IF6, 7.5.1 y 7.6 en versiones anteriores a 7.6.0.1 FP1 para SmartCloud Control Desk permite a usuarios remotos autenticados eludir las restricciones destinadas al acceso, y obtener información sensible o datos modificados, a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-09-29 CVE Reserved
- 2016-01-02 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21970799 | 2016-01-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.6 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 7.5 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 7.5 Search vendor "Ibm" for product "Maximo For Government" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.5 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.6 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.5 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.5 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.5 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.5 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.6 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.6" | - |
Affected
| ||||||