CVE-2016-0222
IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors.
- Score
- CVSS 3.0 4.3 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2016-03-14
- Last modified
- 2024-08-05
- Weaknesses
- CWE-284
Affected products
- Maximo Asset Management (Ibm)
- Maximo For Government (Ibm)
- Maximo For Life Sciences (Ibm)
- Maximo For Nuclear Power (Ibm)
- Maximo For Oil And Gas (Ibm)
- Maximo For Transportation (Ibm)
- Maximo For Utilities (Ibm)
- Smartcloud Control Desk (Ibm)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21976949
