NetSight
high7.5

CVE-2021-38924

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is return…

Impact

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.

Affected products

VendorProductAffected versions
IbmMaximo Application Suite
Versions 8.7, 8.8
IbmMaximo Asset Management
Versions 7.6.1.1, 7.6.1.2

Weakness classification

References