CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Information Exposure
Summary: ibm maximo asset management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 ifix002, and 7.6.0 before 7.6.0.3 ifix001; maximo asset management 7.5.0 before 7.5.0.9 ifix002, 7.5.1, and 7.6.0 before 7.6.0.3 ifix001 for smartcloud control desk; and maximo asset management 7.1 through 7.1.1.13 and 7.2 for tivoli it asset management for it and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2016-01-27
Last Modified Date: 2016-01-28