CVE Vulnerabilities

CVE-2019-4446

Published: Apr 17, 2020 | Modified: Jul 21, 2021
CVSS 3.x
5.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.

Affected Software

Name Vendor Start Version End Version
Control_desk Ibm 7.6.1 (including) 7.6.1 (including)
Control_desk Ibm 7.6.1.1 (including) 7.6.1.1 (including)
Maximo_asset_configuration_manager Ibm 7.6.6 (including) 7.6.6 (including)
Maximo_asset_configuration_manager Ibm 7.6.7 (including) 7.6.7 (including)
Maximo_asset_configuration_manager Ibm 7.6.7.1 (including) 7.6.7.1 (including)
Maximo_asset_health_insights Ibm 7.6.1 (including) 7.6.1 (including)
Maximo_asset_health_insights Ibm 7.6.1.1 (including) 7.6.1.1 (including)
Maximo_asset_management Ibm 7.6.0 (including) 7.6.0 (including)
Maximo_asset_management Ibm 7.6.1 (including) 7.6.1 (including)
Maximo_asset_management Ibm 7.6.1.1 (including) 7.6.1.1 (including)
Maximo_asset_management_scheduler Ibm 7.6.7 (including) 7.6.7 (including)
Maximo_asset_management_scheduler Ibm 7.6.7.1 (including) 7.6.7.1 (including)
Maximo_asset_management_scheduler Ibm 7.6.7.3 (including) 7.6.7.3 (including)
Maximo_asset_management_scheduler_plus Ibm 7.6.7 (including) 7.6.7 (including)
Maximo_asset_management_scheduler_plus Ibm 7.6.7.1 (including) 7.6.7.1 (including)
Maximo_asset_management_scheduler_plus Ibm 7.6.7.3 (including) 7.6.7.3 (including)
Maximo_calibration Ibm 7.6 (including) 7.6 (including)
Maximo_enterprise_adapter Ibm 7.6 (including) 7.6 (including)
Maximo_enterprise_adapter Ibm 7.6.1 (including) 7.6.1 (including)
Maximo_equipment_maintenance_assistant_on-premises Ibm - (including) - (including)
Maximo_for_aviation Ibm 7.6.6 (including) 7.6.6 (including)
Maximo_for_aviation Ibm 7.6.7 (including) 7.6.7 (including)
Maximo_for_aviation Ibm 7.6.8 (including) 7.6.8 (including)
Maximo_for_life_sciences Ibm 7.6 (including) 7.6 (including)
Maximo_for_nuclear_power Ibm 7.6.1 (including) 7.6.1 (including)
Maximo_for_oil_and_gas Ibm 7.6.1 (including) 7.6.1 (including)
Maximo_for_service_providers Ibm 7.6.3.1 (including) 7.6.3.1 (including)
Maximo_for_service_providers Ibm 7.6.3.2 (including) 7.6.3.2 (including)
Maximo_for_service_providers Ibm 7.6.3.3 (including) 7.6.3.3 (including)
Maximo_for_transportation Ibm 7.6.2.3 (including) 7.6.2.3 (including)
Maximo_for_transportation Ibm 7.6.2.4 (including) 7.6.2.4 (including)
Maximo_for_transportation Ibm 7.6.2.5 (including) 7.6.2.5 (including)
Maximo_for_utilities Ibm 7.6.0.1 (including) 7.6.0.1 (including)
Maximo_for_utilities Ibm 7.6.0.2 (including) 7.6.0.2 (including)
Maximo_linear_asset_manager Ibm 7.6.0.1 (including) 7.6.0.1 (including)
Maximo_linear_asset_manager Ibm 7.6.0.2 (including) 7.6.0.2 (including)
Maximo_linear_asset_manager Ibm 7.6.0.3 (including) 7.6.0.3 (including)
Maximo_network_on_blockchain Ibm 7.6.0.0 (including) 7.6.0.0 (including)
Maximo_network_on_blockchain Ibm 7.6.0.1 (including) 7.6.0.1 (including)
Tivoli_integration_composer Ibm 7.6 (including) 7.6 (including)

References