CVE-2015-1933
Summary
| CVE | CVE-2015-1933 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-10-04 02:59:00 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not have an off autocomplete attribute for the password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Change And Configuration Management Database | 7.1 | All | All | All |
| Application | Ibm | Change And Configuration Management Database | 7.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.10 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.11 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.12 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.13 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.5 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.6 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.7 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.8 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.9 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.7 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.8 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.6.0.0 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.1 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5 | All | All | All |
| Application | Ibm | Maximo For Energy Optimization | 7.1 | All | All | All |
| Application | Ibm | Maximo For Government | 7.1 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.1 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.1 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.1 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.1 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.1 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5.0.6 | All | All | All |
| Application | Ibm | Smartcloud Control Desk | 7.5 | All | All | All |
| Application | Ibm | Tivoli Asset Management For It | 7.1 | All | All | All |
| Application | Ibm | Tivoli Asset Management For It | 7.2 | All | All | All |
| Application | Ibm | Tivoli Service Request Manager | 7.1.0 | All | All | All |
| Application | Ibm | Tivoli Service Request Manager | 7.2.0.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM Security Bulletin: IBM Maximo Asset Management could allow a local attacker to obtain information due to the autocomplete feature on password input fields (CVE-2015-1933) - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.