CVE-2018-1524

CWE-11884 documents4 sources
Severity
8.8HIGH
EPSS
0.4%
top 41.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
IBM Maximo Asset ManagementIBM Maximo FOR AviationIBM Maximo FOR Life Sciences+5 more
Timeline
PublishedAug 3
Latest updateMay 13

Description

IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶NVDibm/maximo_asset_management7.6.0.0 — 7.6.3.0
▶CVEListV5ibm/maximo_asset_management10 versions+9
▶NVDibm/maximo9 versions+8
▶NVDibm/smartcloud_control_desk7.6.0.0, 7.6.0.1+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3ghv-w9fm-536c: IBM Maximo Asset Management 7↗2022-05-13
▶
CVEList
CVE-2018-1524: IBM Maximo Asset Management 7↗2018-08-03
▶

💥Exploits & PoCs

1
Exploit-DB
EBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer Overflow↗2020-01-08
▶