ZeroHour

CVE-2023-32335

CVSS 3.1
7.5 high
EPSS
<1%p41
Published
()
Modified
Description

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

Vendors
ibm
Products
maximo application suite, maximo asset management
Weakness
CWE-598
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.