MRO Maximo Unauthorized Script Disclosure Vulnerability

Bugtraq ID:	13508
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 05 2005 12:00AM
Updated:	May 05 2005 12:00AM
Credit:	Disclosure of this issue is credited to Felix <[email protected]>.
Vulnerable:	MRO Software Maximo Self Service 5.0 MRO Software Maximo Self Service 4.0
Not Vulnerable:

MRO Maximo Unauthorized Script Disclosure Vulnerability

MRO Maximo is affected by an unauthorized script disclosure vulnerability. This issue manifests because the files contained in the 'maximo_installation' directory are not recognized as server-side executable scripts.

This issue may be exploited by a remote attacker to download and view MRO Maximo scripts.

This issue was reported to affect MRO Maximo versions 4 and 5.

MRO Maximo Unauthorized Script Disclosure Vulnerability

No exploit is required.

MRO Maximo Unauthorized Script Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MRO Maximo Unauthorized Script Disclosure Vulnerability

References:

• Maximo Homepage (MRO Software)
  
• MRO Maximo v4 & v5 (Felix )