CVE-2020-4529: SSRF
First published: Wed Jun 03 2020(Updated: )
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 182713.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Maximo Asset Management | <=7.6.0 | |
| IBM Maximo Asset Management | <=7.6.1 | |
| IBM Maximo Asset Management | =7.6.0.0 | |
| IBM Maximo Asset Management | =7.6.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-4529?
CVE-2020-4529 has been classified as a moderate severity vulnerability due to its potential for unauthorized network requests.
How do I fix CVE-2020-4529?
To fix CVE-2020-4529, it is recommended to apply the latest security patch from IBM for Maximo Asset Management versions 7.6.0 and 7.6.1.
Who is affected by CVE-2020-4529?
CVE-2020-4529 affects users of IBM Maximo Asset Management versions 7.6.0 and 7.6.1.
What type of vulnerability is CVE-2020-4529?
CVE-2020-4529 is classified as a server-side request forgery (SSRF) vulnerability.
Can CVE-2020-4529 lead to further attacks?
Yes, CVE-2020-4529 can potentially lead to network enumeration or facilitate other attacks due to unauthorized requests.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/severity
- agent/remedy
- agent/author
- agent/description
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm maximo asset management
- version/ibm maximo asset management/7.6.0
- version/ibm maximo asset management/7.6.1
- version/ibm maximo asset management/7.6.0.0
- version/ibm maximo asset management/7.6.1.0