CVE-2024-45652 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request co…
Medium CVSS: 6.5

CVE-2024-45652

IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Vendor
Ibm
Product
Maximo Asset Management
CWE
CWE-22
Yayın Tarihi
2025-01-19 03:15:06
Güncelleme
2025-08-18 17:56:48
Source Identifier
psirt@us.ibm.com
KEV Date Added
-

Kategoriler

CWE-22 Maximo Asset Management MEDIUM Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7174820