CVE-2024-22333

CWE-525CWE-668 — Exposure to Wrong Sphere3 documents3 sources
Severity
3.3LOW
EPSS
0.0%
top 85.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Maximo Application SuiteIBM Maximo Asset Management
Timeline
PublishedJun 13

Description

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5ibm/maximo_asset_management7.6.1.3
▶CVEListV5ibm/maximo_application_suite8.10, 8.11

🔴Vulnerability Details

2
CVEList
IBM Maximo Application Suite information disclosure↗2024-06-13
▶
GHSA
GHSA-9v7r-qg2v-5vfc: IBM Maximo Asset Management 7↗2024-06-13
▶
CVE-2024-22333 (LOW CVSS 3.3) | IBM Maximo Asset Management 7.6.1.3 | cvebase.io