Unrated severityNVD Advisory· Published Mar 13, 2024· Updated Aug 5, 2024

IBM Maximo Application Suite information disclosure

CVE-2023-32335

Description

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Maximo Asset Managementllm-fuzzy2 versions
7.6.1.3+ 1 more
- (no CPE)range: 7.6.1.3
- (no CPE)range: 7.6.1.3
IBM/Maximo Application Suitellm-fuzzy2 versions
8.10, 8.11+ 1 more
- (no CPE)range: 8.10, 8.11
- (no CPE)range: 8.10, 8.11

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7138684mitrevendor-advisory
www.ibm.com/support/pages/node/7138686mitrevendor-advisory
exchange.xforce.ibmcloud.com/vulnerabilities/266875mitrevdb-entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000