CVE-2023-27860CWE-209
IBM Maximo Asset Management information disclosure
Medium · published April 27, 2023
What it is
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This information could be used in further attacks against the system. IBM X-Force ID: 249207.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00527 · 43.8th percentile
- Weakness
- CWE-209 · Generation of Error Message Containing Sensitive Information
- Published
- 2023-04-27T18:59Z
EPSS history
Timeline