CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1524

IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.2%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2018-1524

Ibm » Maximo Asset Management » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0
Ibm » Maximo Asset Management » Version: 7.6.0.1

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1
Ibm » Maximo Asset Management » Version: 7.6.0.10

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.10
Ibm » Maximo Asset Management » Version: 7.6.0.2

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2
Ibm » Maximo Asset Management » Version: 7.6.0.3

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3
Ibm » Maximo Asset Management » Version: 7.6.0.4

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.4
Ibm » Maximo Asset Management » Version: 7.6.0.5

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.5
Ibm » Maximo Asset Management » Version: 7.6.0.6

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.6
Ibm » Maximo Asset Management » Version: 7.6.0.7

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.7
Ibm » Maximo Asset Management » Version: 7.6.0.8

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.8
Ibm » Maximo Asset Management » Version: 7.6.0.9

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.9
Ibm » Maximo Asset Management » Version: 7.6.1

cpe:2.3:a:ibm:maximo_asset_management:7.6.1
Ibm » Maximo Asset Management » Version: 7.6.1.0

cpe:2.3:a:ibm:maximo_asset_management:7.6.1.0
Ibm » Maximo Asset Management » Version: 7.6.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.6.1.1
Ibm » Maximo Asset Management » Version: 7.6.1.2

cpe:2.3:a:ibm:maximo_asset_management:7.6.1.2
Ibm » Maximo Asset Management » Version: 7.6.1.3

cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3
Ibm » Maximo Asset Management » Version: 7.6.2

cpe:2.3:a:ibm:maximo_asset_management:7.6.2
Ibm » Maximo Asset Management » Version: 7.6.3

cpe:2.3:a:ibm:maximo_asset_management:7.6.3
Ibm » Maximo Asset Management » Version: 7.6.3.0

cpe:2.3:a:ibm:maximo_asset_management:7.6.3.0
Ibm » Maximo For Aviation » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_for_aviation:7.6.0.0
Ibm » Maximo For Aviation » Version: 7.6.1.0

cpe:2.3:a:ibm:maximo_for_aviation:7.6.1.0
Ibm » Maximo For Aviation » Version: 7.6.2.0

cpe:2.3:a:ibm:maximo_for_aviation:7.6.2.0
Ibm » Maximo For Aviation » Version: 7.6.2.1

cpe:2.3:a:ibm:maximo_for_aviation:7.6.2.1
Ibm » Maximo For Aviation » Version: 7.6.3.0

cpe:2.3:a:ibm:maximo_for_aviation:7.6.3.0
Ibm » Maximo For Life Sciences » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_for_life_sciences:7.6.0.0
Ibm » Maximo For Nuclear Power » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_for_nuclear_power:7.6.0.0
Ibm » Maximo For Oil And Gas » Version: 7.5.0.0

cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.0
Ibm » Maximo For Oil And Gas » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.6.0.0
Ibm » Maximo For Transportation » Version: 7.6.1.0

cpe:2.3:a:ibm:maximo_for_transportation:7.6.1.0
Ibm » Maximo For Transportation » Version: 7.6.2.0

cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.0
Ibm » Maximo For Transportation » Version: 7.6.2.1

cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.1
Ibm » Maximo For Transportation » Version: 7.6.2.2

cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.2
Ibm » Maximo For Transportation » Version: 7.6.2.3

cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.3
Ibm » Maximo For Transportation » Version: 7.6.2.4

cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.4
Ibm » Maximo For Utilities » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_for_utilities:7.6.0.0
Ibm » Smartcloud Control Desk » Version: 7.6.0.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.6.0.0
Ibm » Smartcloud Control Desk » Version: 7.6.0.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.6.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1524

Products

Pricing

Contact Us