CVE-2013-5464

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated with restricted storerooms, via unspecified vectors.

Weaknesses (CWE)

CWE-264

Affected Products (13)

ibm · maximo_asset_managementvulnerable

ibm · smartcloud_control_deskvulnerable

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1IV46277

http://www-01.ibm.com/support/docview.wss?uid=swg21670870

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/88362

http://www-01.ibm.com/support/docview.wss?uid=swg1IV46277

http://www-01.ibm.com/support/docview.wss?uid=swg21670870

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/88362