CVE-2020-4493

published 2020-10-05

CVE-2020-4493: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. IBM…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. IBM X-Force ID: 181995.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	>= 7.6.0.0 < 7.6.0.10	7.6.0.10
ibm	maximo_asset_management	>= 7.6.1.0 < 7.6.1.2	7.6.1.2

CWE-287