Security Bulletin: IBM Maximo Asset Management is vulnerable to Information Disclosure (CVE-2019-4583)

Summary IBM Maximo Asset Management could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. Vulnerability Details CVEID: CVE-2019-4583 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to obtain...

CVE-2019-4583

CVE-2019-4583 affects IBM Maximo Asset Management core versions 7.6.0.10 and 7.6.1.1 . An authenticated user could obtain sensitive information from a stack trace, potentially aiding future attacks (CVSS v3.1 base score 4.3; vector CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Remediation is to ...