CVE-2013-3323

ibm change and configuration management database, ibm maximo asset management, ibm maximo asset management essentials +10 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2013-3323

Katalog CVE

CVSS 9.8 · Critical EPSS 2,9%

Kerentanan Improper Privilege Management pada ibm change and configuration management database, ibm maximo asset management +11 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Rincian

Terbit di NVD
18 Februari 2020
Terakhir diubah
16 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-269: Improper Privilege Management
EPSS (30 hari)
2,9% peluang dieksploitasi; lebih tinggi dari 86,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
ibm change and configuration management database Versi 7.1
ibm change and configuration management database Versi 7.2
ibm maximo asset management Versi 6.2
ibm maximo asset management Versi 7.1
ibm maximo asset management Versi 7.5
ibm maximo asset management essentials Versi 6.2
ibm maximo asset management essentials Versi 7.1
ibm maximo asset management essentials Versi 7.5
ibm maximo for government Versi 6.2
ibm maximo for government Versi 7.1
ibm maximo for government Versi 7.5
ibm maximo for life sciences Versi 6.2
ibm maximo for life sciences Versi 6.4
ibm maximo for life sciences Versi 6.5
ibm maximo for life sciences Versi 7.1
ibm maximo for life sciences Versi 7.5
ibm maximo for nuclear power Versi 6.2
ibm maximo for nuclear power Versi 6.3
ibm maximo for nuclear power Versi 7.1
ibm maximo for nuclear power Versi 7.5
ibm maximo for oil and gas Versi 6.2
ibm maximo for oil and gas Versi 6.3
ibm maximo for oil and gas Versi 6.4
ibm maximo for oil and gas Versi 7.1
ibm maximo for oil and gas Versi 7.5
ibm maximo for transportation Versi 6.2
ibm maximo for transportation Versi 6.3
ibm maximo for transportation Versi 7.1
ibm maximo for transportation Versi 7.5
ibm maximo for utilities Versi 6.2
ibm maximo for utilities Versi 6.3
ibm maximo for utilities Versi 7.1
ibm maximo for utilities Versi 7.5
ibm maximo service desk Versi 6.2
ibm smartcloud control desk Versi 7.5
ibm tivoli asset management for it Versi 6.2
ibm tivoli asset management for it Versi 7.1
ibm tivoli asset management for it Versi 7.2
ibm tivoli service request manager Versi 7.1
ibm tivoli service request manager Versi 7.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.