CVE-2024-38314CWE-321
IBM Maximo Application Suite - Monitor Component information disclosure
Medium · published October 24, 2024
What it is
IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-coded cryptographic key to an attacker that has compromised environment.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00310 · 22.6th percentile
- Weakness
- CWE-321 · Use of Hard-coded Cryptographic Key
- Published
- 2024-10-24T17:23Z
EPSS history
Timeline