CVE-2017-1499: Malicious File Upload
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-1499?
CVE-2017-1499 is a vulnerability in IBM Maximo Asset Management 7.5 and 7.6 that could allow a remote attacker to include arbitrary files and execute arbitrary code on the vulnerable web server.
What is the severity of CVE-2017-1499?
CVE-2017-1499 has a severity rating of 8.8, which is considered high.
How does CVE-2017-1499 affect IBM Maximo Asset Management?
CVE-2017-1499 affects versions 7.5.0.0 and 7.6.0.0 of IBM Maximo Asset Management, as well as version 7.5.0.0 of IBM Maximo Asset Management Essentials.
How can an attacker exploit CVE-2017-1499?
An attacker can exploit CVE-2017-1499 by including arbitrary files, which allows them to execute arbitrary code on the vulnerable web server.
Where can I find more information about CVE-2017-1499?
You can find more information about CVE-2017-1499 at the following references: [IBM Support](http://www.ibm.com/support/docview.wss?uid=swg22012781) and [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/129106).