medium4.3
CVE-2018-1528
IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API.
Impact
IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | from 7.6.0.0 through 7.6.3.0 |
| Ibm | Maximo For Aviation | Versions 7.6.0.0, 7.6.1.0, 7.6.2.0, 7.6.2.1, 7.6.3.0 |
| Ibm | Maximo For Life Sciences | Version 7.6.0.0 |
| Ibm | Maximo For Nuclear Power | Version 7.6.0.0 |
| Ibm | Maximo For Oil And Gas | Version 7.6.0.0 |
| Ibm | Maximo For Transportation | Versions 7.6.1.0, 7.6.2.0, 7.6.2.1, 7.6.2.2, 7.6.2.3, 7.6.2.4 |
| Ibm | Maximo For Utilities | Version 7.6.0.0 |
| Ibm | Smartcloud Control Desk | Versions 7.6.0.0, 7.6.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/142290
- https://www.ibm.com/support/docview.wss?uid=swg22017450
- http://www.securityfocus.com/bid/105023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/142290
- https://www.ibm.com/support/docview.wss?uid=swg22017450