CVE-2023-32334
Last modified
CVE-2023-32334 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. EPSS estimates a 0.64% chance of exploitation in the next 30 days.
Description
IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255074.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Maximo Application Suite | 8.8.0 |
| Ibm | Maximo Asset Management | 7.6.1.2 |
| Ibm | Maximo Asset Management | 7.6.1.3 |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/255074VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6999721Vendor Advisory
- https://www.ibm.com/support/pages/node/6999747Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/255074VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6999721Vendor Advisory
- https://www.ibm.com/support/pages/node/6999747Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32334?
How severe is CVE-2023-32334?
How do I fix CVE-2023-32334?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32329IBM Security Access Manager Container (IBM Security Verify A…5.5
- CVE-2023-3233A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. I…8.8
- CVE-2023-32330IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses in…9.8
- CVE-2023-32331IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer…7.5
- CVE-2023-32332IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset …5.4
- CVE-2023-32333IBM Maximo Asset Management 7.6.1.3 could allow a remote att…9.8
- CVE-2023-32335IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset…7.5
- CVE-2023-32336IBM InfoSphere Information Server 11.7 is affected by a remo…9.8
- CVE-2023-32337IBM Maximo Spatial Asset Management 8.10 is vulnerable to se…5.4
- CVE-2023-32338IBM Sterling Secure Proxy and IBM Sterling External Authenti…5.5
- CVE-2023-32339IBM Business Automation Workflow is vulnerable to cross-site…6.1
- CVE-2023-3234A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. I…9.8
Are you affected by CVE-2023-32334?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST