CVE-2017-1124: Infoleak
Published Mar 7, 2017
·Updated
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.
Affected Software
32 affected components
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.3
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
IBM Maximo Asset Management=7.1.1.12
IBM Maximo Asset Management=7.1.2
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
IBM Maximo Asset Management=7.5.0.5
IBM Maximo Asset Management=7.5.0.6
IBM Maximo Asset Management=7.5.0.7
IBM Maximo Asset Management=7.5.0.8
IBM Maximo Asset Management=7.5.0.9
IBM Maximo Asset Management=7.5.0.10
IBM Maximo Asset Management=7.6
IBM Maximo Asset Management=7.6.0.0
IBM Maximo Asset Management=7.6.0.1
IBM Maximo Asset Management=7.6.0.2
IBM Maximo Asset Management=7.6.0.3
IBM Maximo Asset Management=7.6.0.4
IBM Maximo Asset Management=7.6.0.5
Remediation
Patch Available
Event History
Mar 7, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Data Sourced
via NVD·05:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-1124?
CVE-2017-1124 has been rated as a medium severity vulnerability.
2
How can I fix CVE-2017-1124?
Fixing CVE-2017-1124 involves applying the necessary security patches released by IBM for affected versions of Maximo Asset Management.
3
Which versions of IBM Maximo Asset Management are affected by CVE-2017-1124?
CVE-2017-1124 affects IBM Maximo Asset Management versions 7.1, 7.5, and 7.6, including specific subversions.
4
What type of attack does CVE-2017-1124 allow?
CVE-2017-1124 allows a local attacker to perform HTTP Header Injection to obtain sensitive information.
5
What should I do if I am using a vulnerable version of IBM Maximo Asset Management regarding CVE-2017-1124?
If you are using a vulnerable version of IBM Maximo Asset Management, you should upgrade to a patched version to mitigate the vulnerability.