First published: Tue Sep 20 2022(Updated: )
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Maximo Asset Management | <=7.6.1.1, 7.6.1.2, 7.6.1.3 | |
IBM Maximo Asset Management | =7.6.1.1 | |
IBM Maximo Asset Management | =7.6.1.2 | |
IBM Maximo Asset Management | =7.6.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2022-40616.
The severity level of CVE-2022-40616 is high, with a CVSS score of 8.1.
The affected version range of IBM Maximo Asset Management is 7.6.1.1 to 7.6.1.3.
An attacker can bypass authentication and obtain sensitive information or perform unauthorized tasks in the affected IBM Maximo Asset Management versions.
Yes, IBM has provided a fix for CVE-2022-40616. Please refer to the official IBM support page for more information.