Lucene search
HistoryApr 27, 2023 - 7:15 p.m.
CVE-2023-27860
ibm
maximo asset management
sensitive information disclosure
error message
further attacks
system
x-force id
249207
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.9
Confidence
High
EPSS
0.001
Percentile
21.6%
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This information could be used in further attacks against the system. IBM X-Force ID: 249207.
Affected configurations
Node
ibmmaximo_asset_managementMatch7.6.1.2
ORibmmaximo_asset_managementMatch7.6.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | maximo_asset_management | 7.6.1.2 | cpe:2.3:a:ibm:maximo_asset_management:7.6.1.2:*:*:*:*:*:*:* |
| ibm | maximo_asset_management | 7.6.1.3 | cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-27860
2023-04-27 19:15:20
prion
prion
Information disclosure
2023-04-27 19:15:00
ibm
ibm
cvelist
cvelist
CVE-2023-27860 IBM Maximo Asset Management information disclosure
2023-04-27 18:59:24
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.9
Confidence
High
EPSS
0.001
Percentile
21.6%
Related for NVD:CVE-2023-27860