Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-35150 EUVD-2024-35549GHSA-939q-9pxw-m29r

IBM Maximo Application Suite log manipulation

Published Jan 25, 2025 · Updated Feb 12, 2025 · Assigned by ibm

Description

IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries.

Affected products

VendorProductAffectedFixed
IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, 9.1.0 —

References