CVE-2023-32335

LOW

IBM Maximo Suite 8.10-8.11 & Asset Mgmt 7.6.1.3 - Sensitive Info Exposure via URL

Title source: llm
STIX 2.1

Description

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/7138684
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/7138686

Scores

CVSS v3 3.7
EPSS 0.0050
EPSS Percentile 38.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-598
Status published
Products (3)
ibm/maximo_application_suite 8.10
ibm/maximo_application_suite 8.11
ibm/maximo_asset_management 7.6.1.3
Published Mar 13, 2024
Tracked Since Feb 18, 2026