Unrated severityNVD Advisory· Published Jun 5, 2023· Updated Jan 8, 2025

IBM Maximo Asset Management information disclosure

CVE-2023-32334

Description

IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255074.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Maximo Asset Managementllm-fuzzy2 versions
>=7.6.1.2 <=7.6.1.3+ 1 more
- (no CPE)range: >=7.6.1.2 <=7.6.1.3
- (no CPE)range: 7.6.1.2, 7.6.1.3
IBM/Maximo Application Suitellm-fuzzy2 versions
=8.8.0+ 1 more
- (no CPE)range: =8.8.0
- (no CPE)range: 8.8.0

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/6999721mitrevendor-advisory
www.ibm.com/support/pages/node/6999747mitrevendor-advisory
exchange.xforce.ibmcloud.com/vulnerabilities/255074mitrevdb-entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000