CVE-2018-2028 IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. IBM X-Force ID:...
MediumCVSS 6.5
EPSS 0.77%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. IBM X-Force ID: 155554.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm control desk | = 7.6.0 | No fix listed |
| ibm control desk | = 7.6.0.1 | No fix listed |
| ibm maximo asset management | = 7.6 | No fix listed |
| ibm maximo for aviation | = 7.6 | No fix listed |
| ibm maximo for aviation | = 7.6.1 | No fix listed |
| ibm maximo for aviation | = 7.6.2 | No fix listed |
| ibm maximo for aviation | = 7.6.2.1 | No fix listed |
| ibm maximo for aviation | = 7.6.3 | No fix listed |
| ibm maximo for life sciences | = 7.6 | No fix listed |
| ibm maximo for nuclear power | = 7.6.0 | No fix listed |
| ibm maximo for oil and gas | = 7.6.0 | No fix listed |
| ibm maximo for transportation | = 7.6.1 | No fix listed |
| ibm maximo for transportation | = 7.6.2 | No fix listed |
| ibm maximo for transportation | = 7.6.2.1 | No fix listed |
| ibm maximo for transportation | = 7.6.2.2 | No fix listed |
| ibm maximo for transportation | = 7.6.2.3 | No fix listed |
| ibm maximo for transportation | = 7.6.2.4 | No fix listed |
| ibm maximo for utilities | = 7.6 | No fix listed |
| ibm smartcloud control desk | All versions | No fix listed |
| ibm tivoli integration composer | All versions | No fix listed |
References
- ibm-maximo-cve20182028-info-disc (155554) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory