medium5.4
CVE-2019-4446
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters.
Impact
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Control Desk | Versions 7.6.1, 7.6.1.1 |
| Ibm | Maximo Asset Configuration Manager | Versions 7.6.6, 7.6.7, 7.6.7.1 |
| Ibm | Maximo Asset Health Insights | Versions 7.6.1, 7.6.1.1 |
| Ibm | Maximo Asset Management | Versions 7.6.0, 7.6.1, 7.6.1.1 |
| Ibm | Maximo Asset Management Scheduler | Versions 7.6.7, 7.6.7.1, 7.6.7.3 |
| Ibm | Maximo Asset Management Scheduler Plus | Versions 7.6.7, 7.6.7.1, 7.6.7.3 |
| Ibm | Maximo Calibration | Version 7.6 |
| Ibm | Maximo Enterprise Adapter | Versions 7.6, 7.6.1 |
| Ibm | Maximo Equipment Maintenance Assistant On-Premises | All versions |
| Ibm | Maximo For Aviation | Versions 7.6.6, 7.6.7, 7.6.8 |
| Ibm | Maximo For Life Sciences | Version 7.6 |
| Ibm | Maximo For Nuclear Power | Version 7.6.1 |