CVE-2013-3323 Privilege escalation in n/a

What is CVE-2013-3323?

CVE-2013-3323 is a critical vulnerability in Ibm Maximo Asset Management, published on 18 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Weakness: CWE-269

Which versions are affected by CVE-2013-3323?

It affects 13 products.

Products include Ibm Change and Configuration Management Database, Ibm Maximo Asset Management, Ibm Maximo Asset Management Essentials, Ibm Maximo for Government, Ibm Maximo for Life Sciences, Ibm Maximo for Nuclear Power and 7 more.

How do I fix CVE-2013-3323?

No fix has been published for CVE-2013-3323 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-3323 being exploited?

There is no known exploitation of CVE-2013-3323 in the wild and no public exploit code.

Other vulnerabilities in Ibm Maximo Asset Management

• CVE-2015-0104 Code injection in n/a High 8.8
• CVE-2012-0714 Cross-site request forgery in n/a Medium 6.8
• CVE-2012-2183 Auth bypass in n/a Medium 6.8
• CVE-2012-2184 Auth bypass in n/a Medium 6.8
• CVE-2015-0107 Path traversal in n/a Medium 6.5

All Ibm Maximo Asset Management vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5h7g-4px8-37g8.