Input validation error in IBM Maximo Application Suite



Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2023-43037
CWE-ID CWE-20
Exploitation vector Network
Public exploit N/A
Vulnerable software
 IBM Maximo Application Suite
Server applications / Other server solutions

Vendor IBM Corporation

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Input validation error

EUVDB-ID: #VU107405

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-43037

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote user can pass specially crafted input to the application and perform unauthorized actions due to improper input validation.

Mitigation

Install update from vendor's website.

Vulnerable software versions

IBM Maximo Application Suite: before 8.11.12, 9.0.11, 8.11.12

CPE2.3 External links

https://www.ibm.com/support/pages/node/7230567


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###