Back

CVE-2024-22333

June 13, 2024, 6:35 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

IBM Maximo Asset Management

  • 7.6.1.3

IBM Maximo Application Suite

  • 8.10
  • 8.11

Source

psirt@us.ibm.com

Tags

psirt@us.ibm.com
CWE-525
2024-06-13
CVE-2024-22333

CVE-2024-22333 details

Published : June 13, 2024, 2:15 p.m.
Last Modified : June 13, 2024, 6:35 p.m.

Description

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

CVSS Score

1 2 3 4.0 5 6 7 8 9 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Base Score

4.0

Exploitability Score

Impact Score

Base Severity

MEDIUM

Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

URL Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 psirt@us.ibm.com
https://www.ibm.com/support/pages/node/7157256 psirt@us.ibm.com
https://www.ibm.com/support/pages/node/7157257 psirt@us.ibm.com
This website uses the NVD API, but is not approved or certified by it.