CVE-2015-1951: IBM Maximo Asset Management

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.0 IFIX005 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation.

Affected products

• IBM Maximo Asset Management: version 7.1 only; version 7.1.1 only; version 7.1.1.1 only; version 7.1.1.2 only; version 7.1.1.5 only; version 7.1.1.6 only; …

Published 2015-07-01. Last modified 2026-06-17.