CVE:CVE-2014-4765
CNNVD:CNNVD-201410-008
IBM Maximo Asset Management等都是美国IBM公司的产品。IBM Maximo Asset Management for SmartCloud Control Desk（SCCD）是一套用于资产和服务管理解决方案（SCCD）中的综合性资产生命周期和维护管理软件。Maximo Asset Management for Tivoli Asset Management for IT是一套IT资产管理解决方案。
IBM Maximo Asset Management中存在安全漏洞。远程攻击者可利用该漏洞从错误消息中获取敏感消息。以下版本受到影响：IBM Maximo Asset Management 7.1至7.1.1.13版本，7.5至7.5.0.6版本，Maximo Asset Management for SCCD 7.5.0至7.5.0.3版本，7.5.1至7.5.1.2版本，Maximo Asset Management for Tivoli IT Asset Management for IT 7.1和7.2版本。
solution:Upgrade ibm change_and_configuration_management_database to a higher version than 7.1,7.2,and avoid the version 7.1,7.2; Upgrade ibm maximo_asset_management to a higher version than 7.1,7.1.1,7.1.1.1,7.1.1.2,7.1.1.5,7.1.1.6,7.1.1.7,7.1.1.8,7.1.1.9,7.1.1.10,7.1.1.11,7.1.1.12,7.1.1.13,7.1.2,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,7.5.0.6,7.5.0.10,and avoid the version 7.1,7.1.1,7.1.1.1,7.1.1.2,7.1.1.5,7.1.1.6,7.1.1.7,7.1.1.8,7.1.1.9,7.1.1.10,7.1.1.11,7.1.1.12,7.1.1.13,7.1.2,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,7.5.0.6,7.5.0.10; Upgrade ibm maximo_asset_management_essentials to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm maximo_for_government to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm maximo_for_life_sciences to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm maximo_for_nuclear_power to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm maximo_for_oil_and_gas to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm maximo_for_transportation to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm maximo_for_utilities to a higher version than 7.1,7.5.0.0,and avoid the version 7.1,7.5.0.0; Upgrade ibm smartcloud_control_desk to a higher version than 7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.5,7.5.1.0,7.5.1.1,and avoid the version 7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.5,7.5.1.0,7.5.1.1; Upgrade ibm tivoli_asset_management_for_it to a higher version than 7.1,7.2,and avoid the version 7.1,7.2; Upgrade ibm tivoli_service_request_manager to a higher version than 7.1,7.2,and avoid the version 7.1,7.2