CVE-2023-32334

IBM Maximo Asset Management information disclosure

Low · published June 5, 2023

CVSS v3.1
3.7
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255074.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Published
2023-06-05T00:44Z
EPSS history
Timeline
  • 05 JUN 00:44Z
    IBM Maximo Asset Management information disclosure
    cvelistv5