CVE-2019-4478: Medium severity ibm maximo asset management vulnerability
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information that they should not normally have access to. IBM X-Force ID: 163998.
Other sources
IBM Maximo Asset Management could allow an authenticated user to obtain highly sensitive information that they should not normally have access to.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4478?
CVE-2019-4478 has been rated as a moderate severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2019-4478?
To fix CVE-2019-4478, upgrade IBM Maximo Asset Management to a patched version as specified in IBM's security advisory.
Who is affected by CVE-2019-4478?
CVE-2019-4478 affects authenticated users of IBM Maximo Asset Management versions 7.6.0.0, 7.6.1, and 7.6.1.1.
What type of information can be exposed by CVE-2019-4478?
CVE-2019-4478 can allow authenticated users to access highly sensitive information that should normally be restricted.
Is CVE-2019-4478 specific to any environment?
CVE-2019-4478 is specifically related to IBM Maximo Asset Management software environments.