CVE-2013-3323

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-18 · updated 2026-06-16
Weakness: CWE-269

Description

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Affected products

IBM Change And Configuration Management Database: 7.1, 7.2
IBM Maximo Asset Management: 6.2, 7.1, 7.5
IBM Maximo Asset Management Essentials: 6.2, 7.1, 7.5
IBM Maximo For Government: 6.2, 7.1, 7.5
IBM Maximo For Life Sciences: 6.2, 6.4, 6.5, 7.1, 7.5
IBM Maximo For Nuclear Power: 6.2, 6.3, 7.1, 7.5
IBM Maximo For Oil And Gas: 6.2, 6.3, 6.4, 7.1, 7.5
IBM Maximo For Transportation: 6.2, 6.3, 7.1, 7.5
IBM Maximo For Utilities: 6.2, 6.3, 7.1, 7.5
IBM Maximo Service Desk: 6.2
IBM Smartcloud Control Desk: 7.5
IBM Tivoli Asset Management For It: 6.2, 7.1, 7.2
IBM Tivoli Service Request Manager: 7.1, 7.2

References

Get alerted when CVE-2013-3323 or the next vulnerability affects your stack