CVE-2015-4966: IBM Change And Configuration Management Database

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products have a default administrator account, which makes it easier for remote authenticated users to obtain access via unspecified vectors.

Affected products

  • IBM Change And Configuration Management Database: version 7.1 only; version 7.2 only
  • IBM Maximo Asset Management: version 7.1 only; version 7.1.1 only; version 7.1.1.1 only; version 7.1.1.2 only; version 7.1.1.5 only; version 7.1.1.6 only; …
  • IBM Maximo For Government: version 7.1 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; …
  • IBM Maximo For Life Sciences: version 7.1 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; …
  • IBM Maximo For Nuclear Power: version 7.1 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; …
  • IBM Maximo For Oil And Gas: version 7.1 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; …
  • IBM Maximo For Transportation: version 7.1 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; …
  • IBM Maximo For Utilities: version 7.1 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; …
  • IBM Smartcloud Control Desk: version 7.5 only; version 7.6 only
  • IBM Tivoli Asset Management For It: version 7.1 only; version 7.2 only
  • IBM Tivoli Service Request Manager: version 7.1.0 only; version 7.2.0.0 only

Published 2015-11-08. Last modified 2026-06-17.