CVE-2019-4056

IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files

Medium · published June 6, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AC:L/I:L/PR:L/AV:N/A:N/C:N/S:U/UI:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.6th percentile
Published
2019-06-06T00:35Z
EPSS history
Timeline
  • 06 JUN 00:35Z
    IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files
    cvelistv5