Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Maximo Asset Management cross-site request forgery
Vulnerability Description
IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 271843.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
IBM Maximo Asset Management 跨站请求伪造漏洞
Vulnerability Description
IBM Maximo Asset Management是美国国际商业机器(IBM)公司的一套综合性资产生命周期和维护管理解决方案。该方案能够在一个平台上管理所有类型的资产,如设施、交通运输等,并对这些资产实现单点控制。 IBM Maximo Asset Management 7.6.1.3 版本和 Manage Component 8.10 到 8.11 版本存在跨站请求伪造漏洞,该漏洞源于容易受到跨站点请求伪造的攻击,这可能允许攻击者执行从网站信任的用户传输的恶意和未经授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A