← CVE Intelligence

CVE-2024-45077

IBM Maximo Asset Management file upload PUBLISHED

Description (CNA)

IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system.

Affected (CNA)

Vendor / productVersions
IBM / Maximo Asset Managementaffected 7.6.1.3

CWE

CWE-98

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.