Arbitrary Purchase-Order Work Log Access Vulnerability in IBM Maximo Asset Management 7.6

Arbitrary Purchase-Order Work Log Access Vulnerability in IBM Maximo Asset Management 7.6

CVE-2016-0222 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors.

Learn more about our User Device Pen Test.