CVE-2024-37068: IBM Maximo Application Suite information disclosure
IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information using man in the middle techniques.
Other sources
IBM Maximo Application Suite - Manage Component uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37068?
CVE-2024-37068 is classified as a high severity vulnerability due to the potential for attackers to decrypt sensitive data.
How do I fix CVE-2024-37068?
To fix CVE-2024-37068, it is recommended to update to a version of IBM Maximo Application Suite - Manage Component that is not affected by the weak encryption algorithms.
What versions of IBM Maximo Application Suite - Manage Component are affected by CVE-2024-37068?
CVE-2024-37068 affects IBM Maximo Application Suite - Manage Component versions 8.10, 8.11, and 9.0 up to certain patch levels.
What type of attack is associated with CVE-2024-37068?
CVE-2024-37068 is associated with man-in-the-middle attacks where an attacker can exploit weaker cryptographic algorithms.
What kind of information could be compromised by CVE-2024-37068?
CVE-2024-37068 could allow attackers to decrypt highly sensitive information managed by the IBM Maximo Application Suite.