CVE-2017-1558: Medium severity ibm maximo asset management vulnerability
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 131548.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-1558?
CVE-2017-1558 is a vulnerability in IBM Maximo Asset Management 7.5 and 7.6 that allows a remote attacker to conduct phishing attacks using an open redirect attack.
How does CVE-2017-1558 work?
CVE-2017-1558 works by persuading a victim to visit a specially-crafted website, which then exploits the vulnerability to spoof the URL and redirect the user to a malicious site.
What is the severity of CVE-2017-1558?
CVE-2017-1558 has a severity level of medium with a score of 6.1.
Which versions of IBM Maximo Asset Management are affected by CVE-2017-1558?
IBM Maximo Asset Management versions 7.5 and 7.6, as well as IBM Maximo Asset Management Essentials version 7.5, are affected by CVE-2017-1558.
How can I fix CVE-2017-1558?
To fix CVE-2017-1558, it is recommended to apply the necessary security patches provided by IBM.