CVE-2020-4409
—CVSS 3.1
8.2 high
EPSS
<1%p57
Published
()
Modified
Description
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 179537.
- Vendors
- ibm
- Products
- control desk, maximo asset configuration manager, maximo asset health insights, maximo asset management, maximo asset management scheduler, maximo asset management scheduler plus, maximo calibration, maximo enterprise adapter, maximo equipment maintenance assistant, maximo for aviation, maximo for life sciences, maximo for nuclear power
- Weakness
- CWE-601
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.