Boletines de Vulnerabilidades

IBM Security Bulletin: IBM Maximo Asset Management installs with a default administrator account that a remote intruder could use to gain administrator access to the system. (CVE-2015-4966)


Información sobre el sistema

   
Software afectado IBM

Descripción

IBM Maximo Asset Management installs with a default administrator account that a remote intruder could use to gain administrator access to the system. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions (including Maximo for Energy Optimization, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities), SmartCloud Control Desk, Tivoli Asset

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_maximo_asset_management_installs_with_a_default_administrator_account_that_a_remote_intruder_could_use_to_gain_administrator_access_to_the_system_cve_2015_4966?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2015-4966 ,CVE-2015-7817 ,CVE-2015-7818 ,CVE-2015-7819 ,CVE-2015-7820 ,CVE-2015-4497 ,CVE-2015-4498 ,CVE-2015-4927 ,CVE-2015-5043 ,CVE-2015-4974 ,CVE-2015-4981 and CVE-2015-1788.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-11-05

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT