CVE:CVE-2011-4817
CNNVD:CNNVD-201203-234
IBM Maximo Asset Management软件为所有资产类型提供综合性资产生命周期和维护管理。
IBM Maximo Asset Management和Asset Management Essentials 6.2版本、7.1版本和7.5版本，基于IT 6.2版本、 7.1版本和7.2版本的IBM Tivoli Asset Management，IBM Tivoli Service Request Manager 7.1版本和7.2版本，IBM Maximo Service Desk 6.2版本和IBM Tivoli Change和Configuration Management Database (CCMDB) 6.2版本、7.1版本和7.2版本中的Help菜单的About选项中存在漏洞。远程认证用户可利用该漏洞借助对相应用户账户的定向攻击，造成未明影响。
solution:Upgrade ibm maximo_asset_management to a higher version than 6.2,7.1,7.5,and avoid the version 6.2,7.1,7.5; Upgrade ibm maximo_asset_management_essentials to a higher version than 6.2,7.1,7.5,and avoid the version 6.2,7.1,7.5; Upgrade ibm tivoli_asset_management_for_it to a higher version than 6.2,7.1,7.2,and avoid the version 6.2,7.1,7.2; Upgrade ibm trivoli_service_request_manager to a higher version than 7.1,7.2,and avoid the version 7.1,7.2; Upgrade ibm maximo_service_desk to a higher version than 6.2,and avoid the version 6.2; Upgrade ibm tivoli_change_and_configuration_management_database to a higher version than 6.2,7.1,7.2,and avoid the version 6.2,7.1,7.2