IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2023-11691)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines (IBM). IBM Maximo Asset Management version 7.6.1.2 and 7.6.1.3 are vulnerable to information disclosure. The vulnerability stems from the program’s inadequate protection of sensitive information, which is exploited by remote attackers to obtain sensitive information when detailed technical error messages are returned in the browser.