Vulnerability Details : CVE-2012-6355
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Exploit prediction scoring system (EPSS) score for CVE-2012-6355
Probability of exploitation activity in the next 30 days: 0.21%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 58 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-6355
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST |
CWE ids for CVE-2012-6355
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-6355
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/80747
IBM Maximo Asset Management new work order privilege escalation CVE-2012-6355 Vulnerability Report
-
http://www-01.ibm.com/support/docview.wss?uid=swg21625624
IBM Security Vulnerabilities Addressed in Asset and Service MgmtVendor Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
IBM notice: The page you requested cannot be displayed
Products affected by CVE-2012-6355
- cpe:2.3:a:ibm:maximo_asset_management:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:6.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management_essentials:6.2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_service_desk:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.:*:*:*:*:*:*:*