CVE-2017-1357: Input Validation
Published Aug 9, 2017
·Updated
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684.
Affected Software
38 affected components
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
IBM Maximo Asset Management=7.5.0.5
IBM Maximo Asset Management=7.5.0.6
IBM Maximo Asset Management=7.5.0.7
IBM Maximo Asset Management=7.5.0.8
IBM Maximo Asset Management=7.5.0.9
IBM Maximo Asset Management=7.5.0.10
IBM Maximo Asset Management=7.6.0.0
IBM Maximo Asset Management=7.6.0.1
IBM Maximo Asset Management=7.6.0.2
IBM Maximo Asset Management=7.6.0.3
IBM Maximo Asset Management=7.6.0.4
IBM Maximo Asset Management=7.6.0.5
IBM Maximo Asset Management=7.6.0.6
IBM Maximo Asset Management=7.6.0.7
IBM Maximo Asset Management Essentials=7.5.0.0
IBM Maximo Asset Management Essentials=7.5.0.1
IBM Maximo Asset Management Essentials=7.5.0.2
IBM Maximo Asset Management Essentials=7.5.0.3
IBM Maximo Asset Management Essentials=7.5.0.4
IBM Maximo Asset Management Essentials=7.5.0.5
IBM Maximo Asset Management Essentials=7.5.0.6
IBM Maximo Asset Management Essentials=7.5.0.7
IBM Maximo Asset Management Essentials=7.5.0.8
IBM Maximo Asset Management Essentials=7.5.0.9
IBM Maximo Asset Management Essentials=7.5.0.10
IBM Maximo Asset Management Essentials=7.6.0.0
IBM Maximo Asset Management Essentials=7.6.0.1
IBM Maximo Asset Management Essentials=7.6.0.2
IBM Maximo Asset Management Essentials=7.6.0.3
IBM Maximo Asset Management Essentials=7.6.0.4
IBM Maximo Asset Management Essentials=7.6.0.5
IBM Maximo Asset Management Essentials=7.6.0.6
IBM Maximo Asset Management Essentials=7.6.0.7
Event History
Aug 9, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1357?
CVE-2017-1357 has a medium severity rating, allowing authenticated users to manipulate work orders.
2
How do I fix CVE-2017-1357?
To fix CVE-2017-1357, you should update your IBM Maximo Asset Management to the latest available version.
3
What versions of IBM Maximo Asset Management are affected by CVE-2017-1357?
CVE-2017-1357 affects IBM Maximo Asset Management versions 7.5 and 7.6.
4
Can CVE-2017-1357 be exploited remotely?
No, CVE-2017-1357 requires authentication, so it cannot be exploited remotely.
5
What type of attack can CVE-2017-1357 facilitate?
CVE-2017-1357 can facilitate email forgery attacks through manipulated work orders.