IBM Maximo Asset Management CSV Injection Vulnerability (CNVD-2021-88198)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control over those assets.IBM Maximo Asset Management is vulnerable to a CSV injection vulnerability that results from improper validation of the contents of csv files. A remote attacker could exploit this vulnerability to be able to execute arbitrary commands on the system.