CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Permissions Privileges and Access Controls
Summary: ibm maximo asset management 6.2 through 7.5, maximo asset management essentials 6.2 through 7.5, tivoli asset management for it 6.2 through 7.2, tivoli service request manager 7.1 and 7.2, maximo service desk 6.2, change and configuration management database (ccmdb) 7.1 and 7.2, and smartcloud control desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2013-02-20
Last Modified Date: 2017-08-29