Skip to content
OpenAdvisories
High · 8.8 CVE-2018-1524 EUVD-2018-12103GHSA-3ghv-w9fm-536c

IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain admini…

Published Aug 3, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116.

Affected products

VendorProductAffectedFixed
IBM Maximo Asset Management 7.6, 7.6.0, 7.6.0.1, 7.6.1, 7.6.2, 7.6.2.1, 7.6.2.2, 7.6.2.3, 7.6.2.4, 7.6.3 —

References