Lucene search

K
nvd[email protected]NVD:CVE-2022-46774
HistoryMar 15, 2023 - 7:15 p.m.

CVE-2022-46774

2023-03-1519:15:24
CWE-287
CWE-276
web.nvd.nist.gov
ibm
maximo
application suite
8.8.0
8.9.0
cve-2022-46774
default permissions
vulnerability

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.

Affected configurations

NVD
Node
ibmmanage_applicationMatch8.4.0
OR
ibmmanage_applicationMatch8.5.0
AND
ibmmaximo_application_suiteMatch8.8.0

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Related for NVD:CVE-2022-46774