PT-2020-10936 · Ibm · Ibm Maximo Anywhere

Published 2020-04-29 · Updated 2021-07-21 · CVE-2019-4288

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Anywhere versions 7.6.2.0 through 7.6.3.1

Description The issue could disclose highly sensitive user information to an authenticated user with physical access to the device.

Recommendations For versions 7.6.2.0 through 7.6.3.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2019-4288

Affected Products

Ibm Maximo Anywhere

References · 5

• https://osv.dev/vulnerability/CVE-2019-4288 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/160631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4288 · Security Note
• https://ibm.com/support/pages/node/6202708 · Vendor Advisory
• https://t.me/cvenotify/3397 · Telegram Post