PT-2023-21380 · Ibm · Ibm Maximo Application Suite
CVE-2023-27861
·
Publicado
2023-06-05
·
Atualizado
2023-06-09
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Maximo Application Suite - Manage Component versions 8.8.0 through 8.9.0
Description
The issue concerns the transmission of sensitive information in cleartext, which could be intercepted by an attacker using man-in-the-middle techniques.
Recommendations
For versions 8.8.0 and 8.9.0, consider implementing encryption to protect sensitive information transmitted by the Manage Component. As a temporary workaround, restrict access to sensitive data until a proper fix is applied.
Correção
Cleartext Transmission of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Maximo Application Suite