CVE-2022-41732CWE-256

IBM Maximo information disclosure

Medium · published November 28, 2022

CVSS v3.1
6.2
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.2th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2022-11-28T16:30Z
EPSS history
Timeline
  • 28 NOV 16:30Z
    IBM Maximo information disclosure
    cvelistv5