| Package | Affected versions | Patched versions |
|---|---|---|
| change and configuration management database | = 7.1= 7.2 | |
| maximo asset management | = 6.2= 7.1= 7.5 | |
| maximo asset management essentials | = 6.2= 7.1= 7.5 | |
| maximo for government | = 6.2= 7.1= 7.5 | |
| maximo for life sciences | = 6.2= 6.4= 6.5= 7.1= 7.5 | |
| maximo for nuclear power | = 6.2= 6.3= 7.1= 7.5 | |
| maximo for oil and gas | = 6.2= 6.3= 6.4= 7.1= 7.5 | |
| maximo for transportation | = 6.2= 6.3= 7.1= 7.5 | |
| maximo for utilities | = 6.2= 6.3= 7.1= 7.5 | |
| maximo service desk | = 6.2 | |
| smartcloud control desk | = 7.5 | |
| tivoli asset management for it | = 6.2= 7.1= 7.2 | |
| tivoli service request manager | = 7.1= 7.2 |
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free