CVE-2024-45077: IBM Maximo Asset Management file upload
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system.
Other sources
IBM Maximo MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45077?
The severity of CVE-2024-45077 is high due to the ability of low privileged users to upload restricted file types.
How do I fix CVE-2024-45077?
To fix CVE-2024-45077, ensure that file uploads are properly validated and do not allow unrestricted file types.
Who is affected by CVE-2024-45077?
CVE-2024-45077 affects users of IBM Maximo Asset Management versions up to and including 7.6.1.3 who are running on Windows.
What is the type of vulnerability in CVE-2024-45077?
CVE-2024-45077 is classified as an unrestricted file upload vulnerability.
Can the exploit of CVE-2024-45077 be mitigated?
Yes, mitigating the exploit for CVE-2024-45077 involves enforcing strict file validation and implementing security measures on file uploads.