CVE-2019-4430: IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request…

high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162887.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_asset_management	—	—