CVE-2017-1357 Vulnerability Details

  /     /     /  

CVE-2017-1357 Metadata Quick Info

CVE Published: 09/08/2017 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: ibm | Vendor: IBM | Product: Maximo Asset Management
Status : PUBLISHED

---

CVE-2017-1357 Description

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: File Manipulation
Source: IBM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).