CVE-2020-4650

CWE-922CWE-200 — Information Exposure3 documents3 sources
Severity
3.3LOW
EPSS
0.0%
top 87.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Maximo Spatial Asset Management
Timeline
PublishedNov 9
Latest updateMay 24

Description

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 186023.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/maximo_spatial_asset_management4 versions+3

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8hgq-8qm6-pq2v: IBM Maximo Spatial Asset Management 7↗2022-05-24
▶
CVEList
CVE-2020-4650: IBM Maximo Spatial Asset Management 7↗2020-11-09
▶
CVE-2020-4650 (LOW CVSS 3.3) | IBM Maximo Spatial Asset Management | cvebase.io