CVE-2014-3024

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-29 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 through 7.5.0.6 and Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk allows remote authenticated users to hijack the authentication of arbitrary users.

Affected products

IBM Maximo Asset Management: 7.1, 7.1.1, 7.1.1.1, 7.1.1.2, 7.1.1.5, 7.1.1.6 (+14)
IBM Smartcloud Control Desk: 7.5.0.0, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.1.0, 7.5.1.1 (+1)

References

http://secunia.com/advisories/60408
http://www-01.ibm.com/support/docview.wss?uid=swg1IV56643
http://www-01.ibm.com/support/docview.wss?uid=swg21679918
http://www.securitytracker.com/id/1030781
https://exchange.xforce.ibmcloud.com/vulnerabilities/93063
http://secunia.com/advisories/60408
http://www-01.ibm.com/support/docview.wss?uid=swg1IV56643
http://www-01.ibm.com/support/docview.wss?uid=swg21679918
http://www.securitytracker.com/id/1030781
https://exchange.xforce.ibmcloud.com/vulnerabilities/93063

Get alerted when CVE-2014-3024 or the next vulnerability affects your stack