CVE-2011-4818

published 2012-03-13

CVE-2011-4818: Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management_essentials	—	—
ibm	maximo_asset_management_essentials	—	—
ibm	maximo_asset_management_essentials	—	—

CWE-20