PT-2016-1633
CVE-2016-0289
·
تاريخ النشر
2016-04-04
·
تاريخ التحديث
2016-04-06
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IBM Maximo Asset Management versions 7.1 through 7.5.0.9
IBM Maximo Asset Management versions 7.6.0.0 through 7.6.0.3
Description
The issue is related to insufficient access control in the SHIPREC application, specifically with the shiprec.xml file. This allows remote authenticated users to bypass intended item-selection restrictions.
Recommendations
For IBM Maximo Asset Management versions 7.1 through 7.5.0.9, update to version 7.5.0.10 or later.
For IBM Maximo Asset Management versions 7.6.0.0 through 7.6.0.3, update to version 7.6.0.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾