IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 186023.
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Maximo_spatial_asset_management | Ibm | 7.6.0.3 (including) | 7.6.0.3 (including) |
| Maximo_spatial_asset_management | Ibm | 7.6.0.4 (including) | 7.6.0.4 (including) |
| Maximo_spatial_asset_management | Ibm | 7.6.0.5 (including) | 7.6.0.5 (including) |
| Maximo_spatial_asset_management | Ibm | 7.6.1.0 (including) | 7.6.1.0 (including) |