First published: Wed Jan 25 2023(Updated: )
IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user. IBM X-Force ID: 241584.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Maximo Application Suite | =8.8.0 | |
IBM Maximo Application Suite | =8.9.0 | |
IBM Maximo Manage Application in IBM Maximo Application Suite | <=MAS 8.9-Manage 8.5 | |
IBM Maximo Manage Application in IBM Maximo Application Suite | <=MAS 8.8-Manage 8.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-43923 is medium.
IBM Maximo Application Suite versions 8.8.0 and 8.9.0 are affected by CVE-2022-43923.
CVE-2022-43923 is a vulnerability in IBM Maximo Application Suite 8.8.0 and 8.9.0 that allows local users to read potentially sensitive information.
A local user can exploit CVE-2022-43923 by reading potentially sensitive information stored in IBM Maximo Application Suite 8.8.0 and 8.9.0.
Yes, IBM has provided remediation steps for CVE-2022-43923. Please refer to the IBM support page for more information.