CVE-2015-7487
Summary
| CVE | CVE-2015-7487 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-01-27 05:59:01 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files. |
Risk And Classification
Primary CVSS: v3.0 4.1 MEDIUM from [email protected]
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Problem Types: CWE-200 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 4.1 | MEDIUM | CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | [email protected] | Primary | 4.9 | AV:L/AC:L/Au:N/C:C/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
LocalAttack Complexity
HighPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:C/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Change And Configuration Management Database | 7.1 | All | All | All |
| Application | Ibm | Change And Configuration Management Database | 7.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.10 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.11 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.12 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.13 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.5 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.6 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.7 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.8 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.1.1.9 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.7 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.8 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.5.0.9 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.6 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.6.0.0 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.6.0.1 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.6.0.2 | All | All | All |
| Application | Ibm | Maximo Asset Management | 7.6.0.3 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.0 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.1 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.2 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.3 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.4 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.5 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.6 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.7 | All | All | All |
| Application | Ibm | Maximo Asset Management Essentials | 7.5.0.8 | All | All | All |
| Application | Ibm | Maximo For Energy Optimization | 7.1 | All | All | All |
| Application | Ibm | Maximo For Government | 7.1 | All | All | All |
| Application | Ibm | Maximo For Government | 7.5 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.1 | All | All | All |
| Application | Ibm | Maximo For Life Sciences | 7.5 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.1 | All | All | All |
| Application | Ibm | Maximo For Nuclear Power | 7.5 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.1 | All | All | All |
| Application | Ibm | Maximo For Oil And Gas | 7.5 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.1 | All | All | All |
| Application | Ibm | Maximo For Transportation | 7.5 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.1 | All | All | All |
| Application | Ibm | Maximo For Utilities | 7.5 | All | All | All |
| Application | Ibm | Smartcloud Control Desk | 7.5.1.0 | All | All | All |
| Application | Ibm | Smartcloud Control Desk | 7.6 | All | All | All |
| Application | Ibm | Tivoli Asset Management For It | 7.1 | All | All | All |
| Application | Ibm | Tivoli Asset Management For It | 7.2 | All | All | All |
| Application | Ibm | Tivoli Service Request Manager | 7.1.0 | All | All | All |
| Application | Ibm | Tivoli Service Request Manager | 7.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM Security Bulletin: IBM Maximo Asset Management contains a vulnerability which could allow an authenticated system administrator to obtain sensitive information incorrectly exposed in log files (CVE-2015-7487) - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.