CVE-2019-4265

CVSS 2.4 LOWEPSS 0.4%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 2.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 oct 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.

CVSS:3.0/PR:N/I:N/C:L/AV:P/S:U/UI:N/A:N/AC:L/RL:O/RC:C/E:U

Productos afectados

IBM · Maximo Anywhere

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/160198 https://www.ibm.com/support/pages/node/1078995