PT-2020-10934 · Ibm · Ibm Maximo Anywhere

Published 2020-05-06 · Updated 2020-05-08 · CVE-2019-4266

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Anywhere versions 7.6.2.0 through 7.6.3.1

Description The issue is related to the lack of device jailbreak detection, which could allow an attacker to gain sensitive information about the device.

Recommendations For versions 7.6.2.0 through 7.6.3.1, consider implementing additional security measures to detect and prevent device jailbreaks until a patch is available.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-4266

Affected Products

Ibm Maximo Anywhere

References · 6

• https://ibm.com/support/pages/node/6205923 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/160199 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4266 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4266 · Security Note
• https://t.me/cvenotify/3574 · Telegram Post
• https://t.me/cibsecurity/11873 · Telegram Post