Description (CNA)
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Maximo Asset Management | affected 7.5; affected 7.6 |
CWE
No CWE identifiers supplied.
References
- http://www.ibm.com/support/docview.wss?uid=swg22006650
- http://www.securityfocus.com/bid/100697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538
ADP enrichment
No English description supplied.