Description
IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors.
References
- ibm-maximo-cve20135460-info-disc(88308) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21670870
- IV46745 vendor-advisory