CVE-2013-5460: IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x b...

Security readout for executives and security teams

This flaw lets a logged-in user bypass intended access controls and read communication logs tied to records they should not access. The business risk is unauthorized exposure of operational or service-management communications inside IBM Maximo Asset Management or SmartCloud Control Desk environments. Exposure is most likely in organizations still running the listed legacy IBM Maximo Asset Management or SmartCloud Control Desk versions. The attacker must already have authenticated access. The source bundle does not provide CPEs, deployment details, or affected configuration conditions. Treat this as a targeted remediation item for legacy IBM service-management systems. It is not cited as actively exploited, but it can expose internal operational communications to authenticated users beyond their intended permissions. Mitigation focus: Upgrade IBM Maximo Asset Management to 7.5.0.6 or later supported guidance.; Upgrade SmartCloud Control Desk to 7.5.0.3 or 7.5.1.2 as applicable.; Review IBM advisory and APAR guidance for environment-specific remediation steps..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.