CVE-2023-43037 - Vulnerability Details - OpenCVE

IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Maximo Application Suite

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7230567

History

Thu, 10 Apr 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 10 Apr 2025 13:45:00 +0000

Type	Values Removed	Values Added
Description		IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.
Title		IBM Maximo Application Suite improper access control
First Time appeared		Ibm Ibm maximo Application Suite
Weaknesses		CWE-20
CPEs		cpe:2.3:a:ibm:maximo_application_suite:8.11.0:::::::* cpe:2.3:a:ibm:maximo_application_suite:9.0.0:::::::*
Vendors & Products		Ibm Ibm maximo Application Suite
References		https://www.ibm.com/support/pages/node/7230567
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-04-10T13:19:47.338Z

Updated: 2025-04-10T14:15:27.169Z

Reserved: 2023-09-15T01:12:19.597Z

Link: CVE-2023-43037

Vulnrichment

Updated: 2025-04-10T14:15:14.786Z

NVD

Status : Awaiting Analysis

Published: 2025-04-10T14:15:25.580

Modified: 2025-04-11T15:39:52.920

Link: CVE-2023-43037

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-43037", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2023-09-15T01:12:19.597Z", "datePublished": "2025-04-10T13:19:47.338Z", "dateUpdated": "2025-04-10T14:15:27.169Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:maximo_application_suite:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite:9.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Maximo Application Suite", "vendor": "IBM", "versions": [{"status": "affected", "version": "8.11, 9.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation."}], "value": "IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-04-10T13:19:47.338Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7230567"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Maximo Application Suite improper access control", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-10T14:15:20.383638Z", "id": "CVE-2023-43037", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-10T14:15:27.169Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-43037", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-10T14:15:20.383638Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-10T14:15:14.786Z"}}], "cna": {"title": "IBM Maximo Application Suite improper access control", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:maximo_application_suite:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite:9.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Maximo Application Suite", "versions": [{"status": "affected", "version": "8.11, 9.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7230567", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.", "supportingMedia": [{"type": "text/html", "value": "IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-04-10T13:19:47.338Z"}}}, "cveMetadata": {"cveId": "CVE-2023-43037", "state": "PUBLISHED", "dateUpdated": "2025-04-10T14:15:27.169Z", "dateReserved": "2023-09-15T01:12:19.597Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-04-10T13:19:47.338Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}