CVE-2015-5016: ibm change_and_configuration_management_database
Vulnerability summary
CVE-2015-5016 is a medium (CVSS 4.3) vulnerability in ibm change_and_configuration_management_database. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.4% of scored vulnerabilities.
Timeline
- 27-03-2018PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.97%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
0.00 pp
From 0.97% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm14 products
- change_and_configuration_management_database7.1 | 7.2
- control_desk7.5 | 7.6
- maximo_asset_management7.1 | 7.5 | 7.6
- maximo_asset_management_essentials7.1 | 7.5
- maximo_for_aviation7.6
1 vendor · 14 products