CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:maximo_application_suite:8.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.8:*:*:*:*:*:*:*

History

01 Dec 2022, 22:54

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:maximo_application_suite:8.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.8:*:*:*:*:*:*:*
CWE CWE-522
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References (MISC) https://www.ibm.com/support/pages/node/6841617 - (MISC) https://www.ibm.com/support/pages/node/6841617 - Vendor Advisory
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/237407 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/237407 - VDB Entry, Vendor Advisory

28 Nov 2022, 18:44

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-28 17:15

Updated : 2024-02-04 23:14


NVD link : CVE-2022-41732

Mitre link : CVE-2022-41732

CVE.ORG link : CVE-2022-41732


JSON object : View

Products Affected

ibm

  • maximo_application_suite
CWE
CWE-522

Insufficiently Protected Credentials

CWE-256

Unprotected Storage of Credentials