CVE-2014-0849: IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7...

Security readout for executives and security teams

CVE-2014-0849 is a privilege gain issue in IBM Maximo Asset Management and SmartCloud Control Desk 7.x. A remote authenticated user could gain additional privileges by using membership in two security groups. This matters where legacy Maximo or SmartCloud Control Desk still supports operational workflows, because excess privileges can affect asset, service, and administrative processes. Exposure is most likely in organizations still running the listed 7.x IBM Maximo or SmartCloud Control Desk versions, especially where users can belong to multiple security groups. Internet exposure is not established by the supplied sources; authentication is required. Treat this as a targeted legacy-platform risk. It is not shown as actively exploited, but affected systems can hold sensitive operational data and workflows. Prioritize verification if Maximo or SmartCloud Control Desk 7.x remains in production. Mitigation focus: Confirm whether affected IBM Maximo or SmartCloud Control Desk versions remain in use.; Apply IBM fixed levels referenced for the affected product branch.; Review IBM vendor advisories for any current support or upgrade guidance..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.