CVE-2019-4582

IBM Maximo Asset Management core versions 7.6.0 and 7.6.1 are vulnerable to a path traversal issue. A remote attacker can supply a crafted URL containing dot-dot sequences (/../) to view arbitrary files on the system. The CVSSv3 base score is 4.3 (MEDIUM), with Network attack vector and low privi...