CVE-2015-7487 Information disclosure in n/a

Medium 4.1 Published 27 Jan 2016 Updated 6 Aug 2024

Local users with administrative privileges can read log files to obtain sensitive information in IBM Maximo Asset Management.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-7487?

CVE-2015-7487 is a medium-severity vulnerability in Ibm Maximo Asset Management, published on 27 Jan 2016. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files.

Weakness: CWE-200

Which versions are affected by CVE-2015-7487?

It affects 13 products.

Products include Ibm Change and Configuration Management Database, Ibm Maximo Asset Management, Ibm Maximo Asset Management Essentials, Ibm Maximo for Energy Optimization, Ibm Maximo for Government, Ibm Maximo for Life Sciences and 7 more.

How do I fix CVE-2015-7487?

No fix has been published for CVE-2015-7487 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-7487 being exploited?

There is no known exploitation of CVE-2015-7487 in the wild and no public exploit code.

All Ibm Maximo Asset Management vulnerabilities

Sources

Also known as GHSA-rcmr-7j3j-9cfg.