Vulnerability Description
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.0 IFIX005 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Maximo Asset Management | 7.1 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21959613Vendor Advisory
- http://www.securityfocus.com/bid/75340
- http://www-01.ibm.com/support/docview.wss?uid=swg21959613Vendor Advisory
- http://www.securityfocus.com/bid/75340
FAQ
What is CVE-2015-1951?
CVE-2015-1951 is a vulnerability with a CVSS score of 2.1 (LOW). IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.0 IFIX005 does not prevent caching of HTTPS responses, which allows physically proximate attacker...
How severe is CVE-2015-1951?
CVE-2015-1951 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1951?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Maximo Asset Management.