Role-Based Access Control Security Flaw in IBM Maximo Application Suite

CVE-2025-2898

What is CVE-2025-2898?

A security configuration vulnerability has been identified in IBM Maximo Application Suite 9.0, affecting its Role-Based Access Control (RBAC) system. This flaw potentially allows an attacker with limited access to gain elevated privileges, posing significant risks to the integrity and confidentiality of the application data. Organizations using this suite should review their RBAC configurations and implement necessary patches to mitigate vulnerabilities.

References