IBM Maximo Asset Management CVE-2017-1175 SQL Injection Vulnerability
BID:99363
Info
IBM Maximo Asset Management CVE-2017-1175 SQL Injection Vulnerability
| Bugtraq ID: | 99363 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1175 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 30 2017 12:00AM |
| Updated: | Jun 30 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
IBM Tivoli Service Request Manager - IBM Tivoli Integration Composer 0 IBM Tivoli Asset Management for IT 0 IBM SmartCloud Control Desk 0 IBM Maximo for Utilities 0 IBM Maximo for Transportation 0 IBM Maximo for Oil and Gas 0 IBM Maximo for Nuclear Power 0 IBM Maximo for Life Sciences 0 IBM Maximo for Government 0 IBM Maximo for Aviation 0 IBM Maximo Asset Management Essentials 7.5 IBM Maximo Asset Management Essentials 7.1 IBM Maximo Asset Management 7.6 IBM Maximo Asset Management 7.5 IBM Maximo Asset Management 7.1 IBM Control Desk 0 |
| Not Vulnerable: | |
Discussion
IBM Maximo Asset Management CVE-2017-1175 SQL Injection Vulnerability
IBM Maximo Asset Management is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
IBM Maximo Asset Management is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
References
IBM Maximo Asset Management CVE-2017-1175 SQL Injection Vulnerability
References:
References: