CVE-2023-32335: IBM Maximo Application Suite information disclosure
First published: Tue Mar 12 2024(Updated: )
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Maximo Application Suite | =8.10 | |
| IBM Maximo Application Suite | =8.11 | |
| IBM Maximo Asset Management | =7.6.1.3 | |
| IBM Maximo Manage Application | <=MAS 8.10.0 - Manage 8.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-32335?
The severity of CVE-2023-32335 is categorized as a medium risk due to potential information disclosure.
How do I fix CVE-2023-32335?
To fix CVE-2023-32335, ensure sensitive information is not stored in URL parameters and consider implementing better access controls.
What types of systems are affected by CVE-2023-32335?
CVE-2023-32335 affects IBM Maximo Application Suite versions 8.10, 8.11 and IBM Maximo Asset Management version 7.6.1.3.
What can happen if CVE-2023-32335 is exploited?
If CVE-2023-32335 is exploited, unauthorized parties may gain access to sensitive information through URL parameters.
Is there a known workaround for CVE-2023-32335?
There is no specific workaround for CVE-2023-32335 other than following best practices to avoid exposing sensitive data.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/references
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/last-modified-date
- agent/severity
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/ibm-support
- source/IBM
- vendor/ibm
- canonical/ibm maximo application suite
- version/ibm maximo application suite/8.10
- version/ibm maximo application suite/8.11
- canonical/ibm maximo asset management
- version/ibm maximo asset management/7.6.1.3
- canonical/ibm maximo manage application
- version/ibm maximo manage application/mas 8.10.0 - manage 8.6.0