Skip to content
OpenAdvisories
Low WID-SEC-2023-1335 1 CVE

IBM Maximo Asset Management: Schwachstelle ermöglicht Offenlegung von Informationen

Published May 31, 2023 · Updated May 31, 2023 · de-DE

Vendor: IBM Product: Maximo Asset Management Product: Maximo Asset Management 7.6.1.2 Product: Maximo Asset Management 7.6.1.3 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um Informationen offenzulegen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 1

  • Low 3.7
    CVE-2023-32334

    IBM Maximo Asset Management information disclosure

    IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or bro…

    IBM Maximo Asset Management Maximo Application Suite

Revision history

  1. #1

    Initiale Fassung

References