Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 up to and including 7.1.1.13 and 7.5.0 prior to 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 up to and including 7.5.0.3 and 7.5.1 up to and including 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 up to and including 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to read arbitrary files via a .. (dot dot) in a pathname.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm change and configuration management database 7.2 |
||
ibm tivoli service request manager 7.1 |
||
ibm smartcloud control desk 7.5.1.0 |
||
ibm smartcloud control desk 7.5.1.1 |
||
ibm maximo for transportation 7.5.0.0 |
||
ibm maximo for transportation 7.1 |
||
ibm maximo asset management 7.5.0.0 |
||
ibm maximo asset management 7.5.0.1 |
||
ibm maximo asset management 7.1.1 |
||
ibm maximo asset management 7.1.1.1 |
||
ibm maximo asset management 7.1.1.6 |
||
ibm maximo asset management 7.1.1.7 |
||
ibm tivoli asset management for it 7.1 |
||
ibm smartcloud control desk 7.5.0.1 |
||
ibm smartcloud control desk 7.5.0.2 |
||
ibm maximo for life sciences 7.1 |
||
ibm maximo for life sciences 7.5.0.0 |
||
ibm maximo for government 7.1 |
||
ibm maximo for government 7.5.0.0 |
||
ibm maximo asset management 7.5.0.3 |
||
ibm maximo asset management 7.5.0.4 |
||
ibm maximo asset management 7.5.0.5 |
||
ibm maximo asset management 7.1.1.12 |
||
ibm maximo asset management 7.1.1.13 |
||
ibm maximo asset management 7.1.2 |
||
ibm change and configuration management database 7.1 |
||
ibm smartcloud control desk 7.5.0.3 |
||
ibm smartcloud control desk 7.5.0.5 |
||
ibm maximo for oil and gas 7.1 |
||
ibm maximo for oil and gas 7.5.0.0 |
||
ibm maximo asset management essentials 7.1 |
||
ibm maximo asset management essentials 7.5.0.0 |
||
ibm maximo asset management 7.5.0.6 |
||
ibm maximo asset management 7.1 |
||
ibm maximo asset management 7.1.1.2 |
||
ibm maximo asset management 7.1.1.5 |
||
ibm tivoli service request manager 7.2 |
||
ibm tivoli asset management for it 7.2 |
||
ibm maximo for utilities 7.1 |
||
ibm maximo for utilities 7.5.0.0 |
||
ibm maximo for nuclear power 7.1 |
||
ibm maximo for nuclear power 7.5.0.0 |
||
ibm maximo asset management 7.5.0.10 |
||
ibm maximo asset management 7.5.0.2 |
||
ibm maximo asset management 7.1.1.10 |
||
ibm maximo asset management 7.1.1.11 |
||
ibm maximo asset management 7.1.1.8 |
||
ibm maximo asset management 7.1.1.9 |
Vulmon