CVE-2020-4521
published 2020-09-15CVE-2020-4521: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe…
high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in Java. By sending specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 182396.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | — | — |
| ibm | maximo_asset_management | >= 7.6.0 < 7.6.0.10 | 7.6.0.10 |
| ibm | maximo_asset_management | >= 7.6.1 < 7.6.1.2 | 7.6.1.2 |