CVE-2019-4430

CVE-2019-4430 affects IBM Maximo Asset Management 7.6. A remote attacker can exploit a path traversal flaw by sending a crafted URL containing dot-dot sequences (/../) to view arbitrary files on the system. The NVD notes a CVSSv3.1 base score of 7.5 (HIGH) with network access, low attack complexi...

Security Bulletin: IBM Maximo Asset Management is vulnerable to File Path Traversal (CVE-2019-4430)

Summary IBM Maximo Asset Management is vulnerable to File Path Traversal Vulnerability Details CVEID: CVE-2019-4430 DESCRIPTION: IBM Maximo Asset Management could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot...