CVE-2024-35150

published 2025-01-25

CVE-2024-35150: IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_application_suite	—	—
ibm	maximo_application_suite	—	—
ibm	maximo_application_suite	>= 8.10.12 < 8.10.15	8.10.15
ibm	maximo_application_suite	>= 8.11 < 8.11.13	8.11.13
ibm	maximo_application_suite	>= 9.0.1 < 9.0.5	9.0.5

CWE-117