IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Maximo_anywhere | Ibm | 7.6.0.0 (including) | 7.6.0.0 (including) |
| Maximo_anywhere | Ibm | 7.6.1.0 (including) | 7.6.1.0 (including) |
| Maximo_anywhere | Ibm | 7.6.2.0 (including) | 7.6.2.0 (including) |
| Maximo_anywhere | Ibm | 7.6.3.0 (including) | 7.6.3.0 (including) |