CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2013-3323
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Severity
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:change_and_configuration_management_database
- ibm:maximo_asset_management
- ibm:maximo_asset_management_essentials
- ibm:maximo_for_government
- ibm:maximo_for_life_sciences
- ibm:maximo_for_nuclear_power
- ibm:maximo_for_oil_and_gas
- ibm:maximo_for_transportation
- ibm:maximo_for_utilities
- ibm:maximo_service_desk
- ibm:smartcloud_control_desk
- ibm:tivoli_asset_management_for_it
- ibm:tivoli_service_request_manager
References
- http://www.securityfocus.com/bid/62685
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77920?_ga=2.229912220.1881683942.1582039056-713214152.1572980240
- https://www.ibm.com/support/pages/node/235239
- http://www.securityfocus.com/bid/62685
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77920?_ga=2.229912220.1881683942.1582039056-713214152.1572980240