CVE-2023-27860

IBM Maximo Asset Management information disclosure

State: Published
Severity: 5.3 Medium
Published: Apr 27, 2023
Updated: Jan 30, 2025
Reserved: Mar 6, 2023

Description

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This information could be used in further attacks against the system. IBM X-Force ID: 249207.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	ibm

Weaknesses

CWE-209 Generation of Error Message Containing Sensitive Information

Affected Products

Product	Versions
Maximo Asset ManagementIBM	7.6.1.2, 7.6.1.3Affected

References

https://www.ibm.com/support/pages/node/6985679vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/249207vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.