Log Injection Vulnerability in IBM Maximo Application Suite

CVE-2024-35150

What is CVE-2024-35150?

The IBM Maximo Application Suite experiences a vulnerability in its Monitor Component that fails to properly neutralize output sent to logs. This imperfection may enable attackers to inject deceptive entries into the log files, potentially leading to misleading information being recorded. Such an attack could compromise the integrity of the logging system, making it challenging to accurately assess the state of the application and potentially allowing further attacks.

References