VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 17, 2015· Updated May 6, 2026

CVE-2014-6102

CVE-2014-6102

Description

IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly handle logout actions, which allows remote attackers to bypass intended Cognos BI Direct Integration access restrictions by leveraging an unattended workstation.

Affected products

48
  • IBM/Change And Configuration Management Database2 versions
    cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*
  • IBM/Maximo Asset Management22 versions
    cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*+ 21 more
    • cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.13:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*
  • IBM/Maximo Asset Management Essentials2 versions
    cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Maximo For Government2 versions
    cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_government:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Maximo For Life Sciences2 versions
    cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Maximo For Nuclear Power2 versions
    cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Maximo For Oil And Gas2 versions
    cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Maximo For Transportation2 versions
    cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Maximo For Utilities2 versions
    cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.0:*:*:*:*:*:*:*
  • IBM/Smartcloud Control Desk6 versions
    cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.1:*:*:*:*:*:*:*
  • IBM/Tivoli Asset Management For It2 versions
    cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*
  • IBM/Tivoli Service Request Manager2 versions
    cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.