NetSight
medium6.5

CVE-2018-2028

IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain high…

Impact

IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. IBM X-Force ID: 155554.

Affected products

VendorProductAffected versions
IbmControl Desk
Versions 7.6.0, 7.6.0.1
IbmMaximo Asset Management
Version 7.6
IbmMaximo For Aviation
Versions 7.6, 7.6.1, 7.6.2, 7.6.2.1, 7.6.3
IbmMaximo For Life Sciences
Version 7.6
IbmMaximo For Nuclear Power
Version 7.6.0
IbmMaximo For Oil And Gas
Version 7.6.0
IbmMaximo For Transportation
Versions 7.6.1, 7.6.2, 7.6.2.1, 7.6.2.2, 7.6.2.3, 7.6.2.4
IbmMaximo For Utilities
Version 7.6
IbmSmartcloud Control Desk
All versions
IbmTivoli Integration Composer
All versions

Weakness classification

References