CVE-2024-22333

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.11:*:*:*:*:*:*:*

History

07 Aug 2024, 17:26

Type Values Removed Values Added
First Time Ibm
Ibm maximo Asset Management
Ibm maximo Application Suite
CWE CWE-525 CWE-668
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3
CPE cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.11:*:*:*:*:*:*:*
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 - VDB Entry
References () https://www.ibm.com/support/pages/node/7157256 - () https://www.ibm.com/support/pages/node/7157256 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7157257 - () https://www.ibm.com/support/pages/node/7157257 - Vendor Advisory

13 Jun 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-13 14:15

Updated : 2024-08-24 11:15


NVD link : CVE-2024-22333

Mitre link : CVE-2024-22333


JSON object : View

Products Affected

ibm

  • maximo_application_suite
  • maximo_asset_management
CWE
CWE-668

Exposure of Resource to Wrong Sphere