Lucene search

IbmVULNRICHMENT:CVE-2024-22333

HistoryJun 13, 2024 - 1:55 p.m.

CVE-2024-22333 IBM Maximo Application Suite information disclosure

2024-06-1313:55:39

CWE-525

ibm

github.com

ibm

maximo application suite

information disclosure

cve-2024-22333

ibm x-force id

web pages stored locally

user system read.

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

References

exchange.xforce.ibmcloud.com/vulnerabilities/279973

www.ibm.com/support/pages/node/7157256

www.ibm.com/support/pages/node/7157257

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-22333