CVE-2020-4529

CVSS 7.3 HIGHEPSS 0.8%

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 jun 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 182713.

CVSS:3.0/UI:N/S:U/AC:L/C:L/PR:N/AV:N/A:L/I:L/RC:C/E:U/RL:O

Productos afectados

IBM · Maximo Asset Management

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/182713 https://www.ibm.com/support/pages/node/6220528