Unscored severity · published Feb 20, 2013
CVE-2012-6355
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1…
–
CVSS
1.2%
EPSS
No
On KEV
Description
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Change And Configuration Management Database · Ibm
7.1.; 7.2.0 · source: NVD
MA
Maximo Asset Management · Ibm
6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +15 more · source: NVD
MA
Maximo Asset Management Essentials · Ibm
6.2.0.0; 7.5.0.0 · source: NVD
MS
Maximo Service Desk · Ibm
6.2 · source: NVD
SC
Smartcloud Control Desk · Ibm
7.5.0.0 · source: NVD
TA
Tivoli Asset Management For IT · Ibm
6.0; 6.2; 7.0; 7.1; 7.2 · source: NVD
TS
Tivoli Service Request Manager · Ibm
7.1.0; 7.1.0.0; 7.2.0.0 · source: NVD
Affected product
CA
Change And Configuration Management Database
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6355
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6355
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21625624
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/80747
More from Change And Configuration Management Database
9.8
CVE-2013-3323
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the…
8.8
CVE-2015-0104
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and…
6.5
CVE-2015-0107
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and…
5.4
CVE-2015-7448
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0…
5.4
CVE-2015-5017
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and…