Description
IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21670870
- IV53952 vendor-advisory
- ibm-maximo-cve20140849-sec-bypass(90738) vdb-entry