CVE-2017-1176: Infoleak
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1176?
CVE-2017-1176 is classified as a medium severity vulnerability that allows unauthorized local users to access sensitive data.
How do I fix CVE-2017-1176?
To fix CVE-2017-1176, users should apply the latest patches provided by IBM for Maximo Asset Management versions 7.1, 7.5, and 7.6.
Which versions are affected by CVE-2017-1176?
CVE-2017-1176 affects IBM Maximo Asset Management versions 7.1, 7.5, and 7.6.
What type of information could be exposed due to CVE-2017-1176?
CVE-2017-1176 could expose sensitive information contained in attachments within the IBM Maximo Asset Management system.
Who is at risk from CVE-2017-1176?
Local users with access to IBM Maximo Asset Management systems are at risk from CVE-2017-1176 due to improper data retention.