CVE-2011-4817
mediumpriority · track · 16EPSS 0.012 · 67 %ileEUUSEPSS · scored 2026-10-27
The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 shows the username, which might allow remote authenticated users to have an unspecified impact via a targeted attack against the corresponding user account.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.4–4
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (16)
Products and version ranges known to be affected.
- ibm maximo asset management essentials= 6.2nvdUScpe:2.3:a:ibm:maximo_asset_management_essentials:*:*:*:*:*:*:*:*
- ibm maximo asset management essentials= 7.1nvdUScpe:2.3:a:ibm:maximo_asset_management_essentials:*:*:*:*:*:*:*:*
- ibm maximo asset management essentials= 7.5nvdUScpe:2.3:a:ibm:maximo_asset_management_essentials:*:*:*:*:*:*:*:*
- ibm tivoli asset management for it= 6.2nvdUScpe:2.3:a:ibm:tivoli_asset_management_for_it:*:*:*:*:*:*:*:*
- ibm tivoli asset management for it= 7.1nvdUScpe:2.3:a:ibm:tivoli_asset_management_for_it:*:*:*:*:*:*:*:*
- ibm tivoli asset management for it= 7.2nvdUScpe:2.3:a:ibm:tivoli_asset_management_for_it:*:*:*:*:*:*:*:*
- ibm tivoli change and configuration management database= 6.2nvdUScpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:*:*:*:*:*:*:*:*
- ibm tivoli change and configuration management database= 7.1nvdUScpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:*:*:*:*:*:*:*:*
- ibm tivoli change and configuration management database= 7.2nvdUScpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:*:*:*:*:*:*:*:*
- ibm trivoli service request manager= 7.1nvdUScpe:2.3:a:ibm:trivoli_service_request_manager:*:*:*:*:*:*:*:*
- ibm trivoli service request manager= 7.2nvdUScpe:2.3:a:ibm:trivoli_service_request_manager:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (19)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/48293cnnvd
- http://secunia.com/advisories/48297cnnvd
- http://secunia.com/advisories/48333cnnvd
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV09197cnnvd
- http://www-01.ibm.com/support/docview.wss?uid=swg21584666Patchcnnvd
- http://www.ibm.com/support/docview.wss?uid=swg21584666cnnvd
- http://xforce.iss.net/xforce/xfdb/72004cnnvd
- http://secunia.com/advisories/48299enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan