Code injection

IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494...

Code injection

IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697...

CVE-2019-4352

IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494...

CVE-2019-4352

CVE-2019-4352 affects IBM Maximo Anywhere 7.6.4.0, where the product’s source code could be deobfuscated due to lack of binary obfuscation. The vulnerability’s CVSS details indicate a low-severity impact (C:L, I:N, A:N) with a physical attack vector and no authentication required. IBM’s bulletin ...

CVE-2019-4351

IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the device. IBM X-Force ID: 161493...

CVE-2019-4351

CVE-2019-4351 affects IBM Maximo Anywhere 7.6.4.0, where the application could disclose sensitive information to a user with physical access due to how usernames are stored in local storage (directory names for user attachments). The issue is a local-access information disclosure vulnerability (n...

CVE-2019-4291

CVE-2019-4291 affects IBM Maximo Anywhere 7.6.4.0, where lack of binary protection allows reverse engineering of the application due to missing binary obfuscation. Public sources from NVD/IBM/X-Force corroborate a medium-severity issue (CVSS v3.1 base score 6.5; v2 base 6.4) with network access a...

CVE-2019-4291

IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697...

IBM Maximo Anywhere 安全漏洞

IBM Maximo Anywhere is a set of next-generation mobile solutions built on the IBM Worklight platform from IBM U.S. IBM Maximo Anywhere has an information disclosure vulnerability that could be exploited by attackers to obtain sensitive information...

IBM Maximo Anywhere 加密问题漏洞

IBM Maximo Anywhere is a next-generation mobile solution from IBM built on the IBM Worklight platform. The solution supports remote access to IBM Maximo Asset Management a comprehensive asset lifecycle and maintenance management solution workflow and asset management via mobile devices. an...

IBM Maximo Anywhere 加密问题漏洞

IBM Maximo Anywhere is a next-generation mobile solution from IBM built on the IBM Worklight platform. An encryption vulnerability exists in IBM Maximo Anywhere, which stems from the product's failure to effectively protect program source code. An attacker could obfuscate the source code through...

Security Bulletin: IBM Maximo Anywhere applications have no binary obfuscation

Summary IBM Maximo Anywhere applications have no binary obfuscation of source code allowing the applications to be de-compiled. Vulnerability Details CVEID: CVE-2019-4291 DESCRIPTION: IBM Maximo Anywhere could allow an attacker to reverse engineer the application due to the lack of binary...

Security Bulletin: IBM Maximo Anywhere Discloses Sensitive Information in Local Storage

Summary IBM Maximo Anywhere application stores the username in local storage as directory names to store user specific attachments. Vulnerability Details CVEID:CVE-2019-4351 DESCRIPTION: IBM Maximo Anywhere applications could disclose sensitive information to a user with physical access to the...

Security Bulletin: IBM Maximo Anywhere applications have no binary obfuscation

Summary IBM Maximo Anywhere applications have no binary obfuscation of source code allowing the applications to be de-compiled. Vulnerability Details CVEID: CVE-2019-4352 DESCRIPTION: IBM Maximo Anywhere applications could allow obfuscation of the application source code. CVSS Base score: 2.4 CVS...

IBM Maximo Anywhere Environment Issue Vulnerability

IBM Maximo Anywhere is a suite of next-generation mobile solutions from IBM USA built on the IBM Worklight platform. The solution supports remote access to IBM Maximo Asset Management a comprehensive asset lifecycle and maintenance management solution workflow and asset management via mobile...

CVE-2019-4349

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486...

CVE-2019-4349

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486...

Design/Logic Flaw

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486...

CVE-2019-4349

IBM Maximo Anywhere 7.6.2.x and 7.6.3.x support on deprecated Android OS versions can expose confidentiality and integrity of the service. The vulnerability arises from installing Maximo Anywhere on a non-recommended OS (Android API level 14), with a CVSS base score of 3.5 (LOW). Affected product...

CVE-2019-4349

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486...