3.5
CVSSv2

CVE-2013-2998

Published: 26/05/2014 Updated: 29/08/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Vulnerability Summary

frontcontroller.jsp in IBM Maximo Asset Management 7.x prior to 7.5.0.6 and SmartCloud Control Desk 7.x prior to 7.5.0.3 and 7.5.1.x prior to 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid action_code.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm smartcloud control desk 7.5.0.0

ibm smartcloud control desk 7.5.0.1

ibm smartcloud control desk 7.5.0.2

ibm smartcloud control desk 7.5.1.0

ibm smartcloud control desk 7.5.1.1

ibm smartcloud control desk 7.0

ibm smartcloud control desk 7.5

ibm maximo asset management 7.1.1.12

ibm maximo asset management 7.1.1.2

ibm maximo asset management 7.5.0.0

ibm maximo asset management 7.5.0.1

ibm maximo asset management 7.1.1

ibm maximo asset management 7.1.1.1

ibm maximo asset management 7.1.1.7

ibm maximo asset management 7.1.1.8

ibm maximo asset management 7.5.0.4

ibm maximo asset management 7.5.0.5

ibm maximo asset management 7.1

ibm maximo asset management 7.1.1.5

ibm maximo asset management 7.1.1.6

ibm maximo asset management 7.5.0.2

ibm maximo asset management 7.5.0.3

ibm maximo asset management 7.1.1.10

ibm maximo asset management 7.1.1.11

ibm maximo asset management 7.1.1.9

ibm maximo asset management 7.1.2