CVE-2024-35144 - Vulnerability Details - OpenCVE

IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Ibm	Maximo Application Suite

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7174953

History

Mon, 27 Jan 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sat, 25 Jan 2025 14:45:00 +0000

Type	Values Removed	Values Added
Description		IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.
Title		IBM Maximo Application Suite information disclosure
First Time appeared		Ibm Ibm maximo Application Suite
Weaknesses		CWE-540
CPEs		cpe:2.3:a:ibm:maximo_application_suite:8.10.0:::::::* cpe:2.3:a:ibm:maximo_application_suite:8.11.0:::::::* cpe:2.3:a:ibm:maximo_application_suite:9.0.0:::::::*
Vendors & Products		Ibm Ibm maximo Application Suite
References		https://www.ibm.com/support/pages/node/7174953
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-01-25T14:24:56.824Z

Updated: 2025-01-27T15:00:50.153Z

Reserved: 2024-05-09T16:27:36.634Z

Link: CVE-2024-35144

Vulnrichment

Updated: 2025-01-27T15:00:43.083Z

NVD

Status : Received

Published: 2025-01-25T15:15:07.633

Modified: 2025-01-25T15:15:07.633

Link: CVE-2024-35144

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35144", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-05-09T16:27:36.634Z", "datePublished": "2025-01-25T14:24:56.824Z", "dateUpdated": "2025-01-27T15:00:50.153Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:maximo_application_suite:8.10.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite:9.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Maximo Application Suite", "vendor": "IBM", "versions": [{"status": "affected", "version": "8.10.0, 8.11.0, 9.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system."}], "value": "IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-540", "description": "CWE-540 Inclusion of Sensitive Information in Source Code", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-01-25T14:28:35.023Z"}, "references": [{"url": "https://www.ibm.com/support/pages/node/7174953"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Maximo Application Suite information disclosure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-27T15:00:36.734983Z", "id": "CVE-2024-35144", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T15:00:50.153Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35144", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-27T15:00:36.734983Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T15:00:43.083Z"}}], "cna": {"title": "IBM Maximo Application Suite information disclosure", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:maximo_application_suite:8.10.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite:8.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:maximo_application_suite:9.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Maximo Application Suite", "versions": [{"status": "affected", "version": "8.10.0, 8.11.0, 9.0.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7174953"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.", "supportingMedia": [{"type": "text/html", "value": "IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-540", "description": "CWE-540 Inclusion of Sensitive Information in Source Code"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-01-25T14:28:35.023Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35144", "state": "PUBLISHED", "dateUpdated": "2025-01-27T15:00:50.153Z", "dateReserved": "2024-05-09T16:27:36.634Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-01-25T14:24:56.824Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}