CVE-2024-22333

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:maximo_application_suite:8.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*

History

07 Aug 2024, 17:26

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.0
v2 : unknown
v3 : 3.3
First Time Ibm
Ibm maximo Application Suite
Ibm maximo Asset Management
CWE CWE-668
CPE cpe:2.3:a:ibm:maximo_application_suite:8.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:8.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/279973 - VDB Entry
References () https://www.ibm.com/support/pages/node/7157256 - () https://www.ibm.com/support/pages/node/7157256 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7157257 - () https://www.ibm.com/support/pages/node/7157257 - Vendor Advisory

13 Jun 2024, 18:35

Type Values Removed Values Added
Summary
  • (es) IBM Maximo Asset Management 7.6.1.3 e IBM Maximo Application Suite 8.10 y 8.11 permiten almacenar páginas web localmente que pueden ser leídas por otro usuario en el sistema. ID de IBM X-Force: 279973.

13 Jun 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-13 14:15

Updated : 2024-08-24 11:15


NVD link : CVE-2024-22333

Mitre link : CVE-2024-22333

CVE.ORG link : CVE-2024-22333


JSON object : View

Products Affected

ibm

  • maximo_asset_management
  • maximo_application_suite
CWE
CWE-668

Exposure of Resource to Wrong Sphere

CWE-525

Use of Web Browser Cache Containing Sensitive Information