IBM patches "highly dangerous" Maximo Asset Management flaw

guest · Jun 18, 2020

IBM patches "highly dangerous" Maximo Asset Management flaw
June 18, 2020
https://www.itpro.co.uk/security/vu...highly-dangerous-maximo-asset-management-flaw

IBM has patched a dangerous flaw found in its Maximo Asset Management software that could allow hackers to send unauthorised requests from corporate systems to scan networks and launch other attacks.

Dubbed vulnerability CVE-2020-4529, the flaw also affects industry-specific versions of IBM Maximo, for sectors including pharmaceuticals, oil and gas, auto manufacturing, aerospace, railways, airports, utilities, and nuclear power plants. It also affects SmartCloud Control Desk, IBM Control Desk and Tivoli Integration Composer.
Found in versions 7.6.0 and 7.6.1 of IBM Maximum Asset Management, the attack involves server-side request forgery (SSRF) [...] With a CSS score of 7.3, it’s deemed “highly dangerous”.
Click to expand...

“IBM Maximo Asset Management software is used at major critical facilities,” said Sharoglazov. “Any vulnerabilities in it could attract APT groups interested in access to the internal network.
Customers are urged to immediately update IBM Maximo Asset Management, as well as associated solutions and products, to the latest versions.
Click to expand...

Positive Technologies: A vulnerability in IBM Maximo discovered by Positive Technologies was fixed

Log in or Sign up

IBM patches "highly dangerous" Maximo Asset Management flaw

guest Guest

Log in or Sign up

IBM patches "highly dangerous" Maximo Asset Management flaw

guest Guest

Useful Searches