CVE-2019-4582: Path Traversal
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 167288.
Other sources
IBM Maximo Asset Management could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-4582.
What is the severity of CVE-2019-4582?
The severity of CVE-2019-4582 is medium with a score of 4.3.
What does IBM Maximo Asset Management version 7.6.0 and 7.6.1 allow a remote attacker to do?
IBM Maximo Asset Management version 7.6.0 and 7.6.1 allow a remote attacker to traverse directories on the system and view arbitrary files.
How can an attacker exploit CVE-2019-4582?
An attacker can exploit CVE-2019-4582 by sending a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Is there a fix available for CVE-2019-4582?
Yes, IBM has provided a fix for CVE-2019-4582. Please refer to IBM's support page for more information.