Security Bulletin: IBM Maximo Asset Management is vulnerable to Privilege Escalation (CVE-2019-4530)

Summary IBM Maximo Asset Management could allow an authenticated user to delete a record that they should not normally be able to. Vulnerability Details CVEID: CVE-2019-4530 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to delete a record that they should not normally...

CVE-2019-4530

CVE-2019-4530 concerns IBM Maximo Asset Management versions 7.6, 7.6.1, and 7.6.1.1, where an authenticated user could delete a record they should not normally be able to. The IBM security bulletin documents a privilege-escalation issue tied to DELETE access on MXAPIWODETAIL; images show affected...