PT-2020-10935 · Ibm · Ibm Maximo Anywhere

Published 2020-04-29 · Updated 2021-07-21 · CVE-2019-4286

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Anywhere versions 7.6.2.0 through 7.6.3.1

Description The issue could disclose highly sensitive user information to an authenticated user with physical access to the device.

Recommendations For IBM Maximo Anywhere versions 7.6.2.0 through 7.6.3.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-4286

Affected Products

Ibm Maximo Anywhere

References · 5

• https://ibm.com/support/pages/node/6202556 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4286 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4286 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/160514 · Vendor Advisory
• https://t.me/cvenotify/3396 · Telegram Post