VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 18, 2020· Updated Jun 16, 2026

CVE-2013-3323

CVE-2013-3323

Description

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

42
  • IBM/Change And Configuration Management Database2 versions
    cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*
  • IBM/Maximo Asset Management4 versions
    cpe:2.3:a:ibm:maximo_asset_management:6.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:maximo_asset_management:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*
    • (no CPE)range: 7.5, 7.1, and 6.2
  • IBM/Maximo Asset Management Essentials3 versions
    cpe:2.3:a:ibm:maximo_asset_management_essentials:6.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:maximo_asset_management_essentials:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*
  • IBM/Maximo For Government3 versions
    cpe:2.3:a:ibm:maximo_for_government:6.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:maximo_for_government:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_government:7.5:*:*:*:*:*:*:*
  • IBM/Maximo For Life Sciences5 versions
    cpe:2.3:a:ibm:maximo_for_life_sciences:6.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:maximo_for_life_sciences:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_life_sciences:6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_life_sciences:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_life_sciences:7.5:*:*:*:*:*:*:*
  • IBM/Maximo For Nuclear Power4 versions
    cpe:2.3:a:ibm:maximo_for_nuclear_power:6.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:maximo_for_nuclear_power:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_nuclear_power:6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5:*:*:*:*:*:*:*
  • IBM/Maximo For Oil And Gas5 versions
    cpe:2.3:a:ibm:maximo_for_oil_and_gas:6.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5:*:*:*:*:*:*:*
  • IBM/Maximo For Transportation4 versions
    cpe:2.3:a:ibm:maximo_for_transportation:6.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:maximo_for_transportation:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_transportation:6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_transportation:7.5:*:*:*:*:*:*:*
  • IBM/Maximo For Utilities4 versions
    cpe:2.3:a:ibm:maximo_for_utilities:6.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:maximo_for_utilities:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_utilities:6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_utilities:7.5:*:*:*:*:*:*:*
  • IBM/Maximo Service Desk
    cpe:2.3:a:ibm:maximo_service_desk:6.2:*:*:*:*:*:*:*
  • IBM/Smartcloud Control Desk
    cpe:2.3:a:ibm:smartcloud_control_desk:7.5:*:*:*:*:*:*:*
  • IBM/Tivoli Asset Management For It3 versions
    cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*
  • IBM/Tivoli Service Request Manager2 versions
    cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*
  • IBM/Maximo Asset Managementdescription

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.