Local File Disclosure in IBM Maximo Spatial Asset Management
CVE-2020-4650
4MEDIUM
Summary
IBM Maximo Spatial Asset Management versions 7.6.0.3 through 7.6.1.0 are vulnerable to a local file disclosure issue, where web pages can be stored locally. This results in the risk that these pages may be accessible and readable by unauthorized users on the system, potentially exposing sensitive information or configurations. For more detailed information regarding this vulnerability, please refer to the IBM support documentation and X-Force Exchange IDs.
Affected Version(s)
Maximo Spatial Asset Management 7.6.0.3
Maximo Spatial Asset Management 7.6.0.4
Maximo Spatial Asset Management 7.6.0.5
References
CVSS V3.1
Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved