CVE-2020-4526

published 2020-09-15

CVE-2020-4526: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…

medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C N I L A N

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 182436.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	>= 7.6.0 < 7.6.0.10	7.6.0.10
ibm	maximo_asset_management	>= 7.6.1 < 7.6.1.2	7.6.1.2

CWE-352