CVE-2013-3323: IBM Change And Configuration Management Database

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Affected products

IBM Change And Configuration Management Database: version 7.1 only; version 7.2 only
IBM Maximo Asset Management: version 6.2 only; version 7.1 only; version 7.5 only
IBM Maximo Asset Management Essentials: version 6.2 only; version 7.1 only; version 7.5 only
IBM Maximo For Government: version 6.2 only; version 7.1 only; version 7.5 only
IBM Maximo For Life Sciences: version 6.2 only; version 6.4 only; version 6.5 only; version 7.1 only; version 7.5 only
IBM Maximo For Nuclear Power: version 6.2 only; version 6.3 only; version 7.1 only; version 7.5 only
IBM Maximo For Oil And Gas: version 6.2 only; version 6.3 only; version 6.4 only; version 7.1 only; version 7.5 only
IBM Maximo For Transportation: version 6.2 only; version 6.3 only; version 7.1 only; version 7.5 only
IBM Maximo For Utilities: version 6.2 only; version 6.3 only; version 7.1 only; version 7.5 only
IBM Maximo Service Desk: version 6.2 only
IBM Smartcloud Control Desk: version 7.5 only
IBM Tivoli Asset Management For It: version 6.2 only; version 7.1 only; version 7.2 only
IBM Tivoli Service Request Manager: version 7.1 only; version 7.2 only

Published 2020-02-18. Last modified 2026-06-16.