CVE-2023-32335

CWE-5983 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 76.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Maximo Application SuiteIBM Maximo Asset Management
Timeline
PublishedMar 13

Description

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5ibm/maximo_asset_management7.6.1.3
▶CVEListV5ibm/maximo_application_suite8.10, 8.11

🔴Vulnerability Details

2
CVEList
IBM Maximo Application Suite information disclosure↗2024-03-13
▶
GHSA
GHSA-2467-cw25-7vww: IBM Maximo Application Suite 8↗2024-03-13
▶
CVE-2023-32335 (HIGH CVSS 7.5) | IBM Maximo Application Suite 8.10 | cvebase.io