NVD

Id
31348  
Name
CVE-2014-3084  
Description
IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-08-29  
Modified Date
2017-01-06  
Seq
2014-3084  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164142 31348 CVE-2014-3084 60408  View
164143 31348 CVE-2014-3084 60453  View
164144 31348 CVE-2014-3084 IV61274  View
164145 31348 CVE-2014-3084 http://www-01.ibm.com/support/docview.wss?uid=swg21681020  View
164146 31348 CVE-2014-3084 1030780  View
164147 31348 CVE-2014-3084 ibm-maximo-cve20143084-sec-bypass(93955)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15123 JVNDB-2014-003998 複数の IBM 製品におけるカレンダーエントリへの書き込みアクセス制限を回避される脆弱性 IBM Maximo Asset Management、SmartCloud Control Desk、Tivoli Asset Management for IT およびその他の製品には、カレンダーエントリへの書き込みアクセス制限を回避される脆弱性が存在します。 CVE-2014-3084 70371 CVE-2014-3084 31348 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003998.html 2014-08-27 2014-09-01 View