What is CVE-2020-4529?

CVE-2020-4529 is a high-severity vulnerability in Ibm Maximo Asset Management, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.4/10. Published 2020-06-08.

How severe is CVE-2020-4529?

High severity. CVSS v3 base score is 7.4 out of 10.

SSRF in Ibm Maximo Asset Management

CVE-2020-4529

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilita…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.008 (53.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L.

Affected products

Ibm Maximo Asset Management — versions 7.6.0, 7.6.1
Ibm Maximo_asset_management — versions 7.6.0.0, 7.6.1.0

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2020-4529?: CVE-2020-4529 is a high-severity vulnerability in Ibm Maximo Asset Management, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.4/10. Published 2020-06-08.
How severe is CVE-2020-4529?: High severity. CVSS v3 base score is 7.4 out of 10.