PT-2021-13968 · Ibm · Ibm Maximo For Civil Infrastructure

Published 2021-02-18 · Updated 2021-02-22 · CVE-2021-20443

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: IBM Maximo for Civil Infrastructure version 7.6.2

Description: The issue concerns executable functionality, such as a library, being included from a source outside of the intended control sphere.

Recommendations: For IBM Maximo for Civil Infrastructure version 7.6.2, consider restricting access to the executable functionality until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2021-20443

Affected Products

Ibm Maximo For Civil Infrastructure

References · 5

• https://osv.dev/vulnerability/CVE-2021-20443 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/196619 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20443 · Security Note
• https://ibm.com/support/pages/node/6415883 · Vendor Advisory
• https://t.me/cibsecurity/23814 · Telegram Post