CVE-2022-46774: IBM Manage Application security bypass
First published: Tue Mar 07 2023(Updated: )
IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Maximo Manage Application in IBM Maximo Application Suite | <=MAS 8.8-Manage 8.4 | |
| IBM Maximo Manage Application in IBM Maximo Application Suite | <=MAS 8.8-Manage 8.5 | |
| IBM Manage Application | =8.4.0 | |
| IBM Manage Application | =8.5.0 | |
| IBM Maximo Application Suite | =8.8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-46774.
What is the title of this vulnerability?
The title of this vulnerability is 'IBM Manage Application in the IBM Maximo Application Suite is vulnerable to incorrect default permissions'.
What is the severity of CVE-2022-46774?
The severity of CVE-2022-46774 is medium.
What is the affected software?
The affected software includes IBM Manage Application versions 8.4.0, 8.5.0, and IBM Maximo Application Suite version 8.8.0.
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker gaining unauthorized access to actions they should not have access to.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm manage application
- version/ibm manage application/8.4.0
- version/ibm manage application/8.5.0
- canonical/ibm maximo application suite
- version/ibm maximo application suite/8.8.0
- canonical/ibm maximo manage application in ibm maximo application suite
- version/ibm maximo manage application in ibm maximo application suite/mas 8.8-manage 8.4
- version/ibm maximo manage application in ibm maximo application suite/mas 8.8-manage 8.5