CVE-2018-1528
IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290.
- Score
- CVSS 3.0 4.3 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2018-08-06
- Last modified
- 2024-09-17
- Weaknesses
- CWE-200
Affected products
- Maximo Asset Management (Ibm)
- Maximo For Aviation (Ibm)
- Maximo For Life Sciences (Ibm)
- Maximo For Nuclear Power (Ibm)
- Maximo For Oil And Gas (Ibm)
- Maximo For Transportation (Ibm)
- Maximo For Utilities (Ibm)
- Smartcloud Control Desk (Ibm)
References
- http://www.securityfocus.com/bid/105023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/142290
- https://www.ibm.com/support/docview.wss?uid=swg22017450
