CVE-2022-41732

2022-11-2817:15:10

CWE-256

CWE-522

[email protected]

web.nvd.nist.gov

ibm

maximo

mobile

user credentials

plain clear text

security vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

5.1%

JSON

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407.

Affected configurations

Nvd

Node

ibmmaximo_application_suiteMatch8.7

ibmmaximo_application_suiteMatch8.8

VendorProductVersionCPE
ibmmaximo_application_suite8.7cpe:2.3:a:ibm:maximo_application_suite:8.7:*:*:*:*:*:*:*
ibmmaximo_application_suite8.8cpe:2.3:a:ibm:maximo_application_suite:8.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	maximo_application_suite	8.7	cpe:2.3:a:ibm:maximo_application_suite:8.7:::::::*
ibm	maximo_application_suite	8.8	cpe:2.3:a:ibm:maximo_application_suite:8.8:::::::*