CVE-2012-2184

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Asset Management For It
Smartcloud Control Desk
Change And Configuration Management Database
Maximo Asset Management
Vendor
CVE Published:
10 September 2012

Summary

Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/75780
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg1IV19887
vendor-advisoryx_refsource_AIXAPAR
http://secunia.com/advisories/50551
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.