IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 179537.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/179537 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6333091 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/179537 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6333091 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/179537 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/6333091 - Patch, Vendor Advisory |
Information
Published : 2020-09-16 16:15
Updated : 2024-11-21 05:32
NVD link : CVE-2020-4409
Mitre link : CVE-2020-4409
CVE.ORG link : CVE-2020-4409
JSON object : View
Products Affected
ibm
- tivoli_integration_composer
- maximo_for_transportation
- maximo_asset_management_scheduler_plus
- control_desk
- maximo_for_oil_and_gas
- maximo_asset_configuration_manager
- maximo_for_life_sciences
- maximo_linear_asset_manager
- maximo_network_on_blockchain
- maximo_asset_management
- maximo_calibration
- maximo_for_service_providers
- maximo_for_nuclear_power
- maximo_spatial_asset_management
- maximo_for_utilities
- maximo_asset_management_scheduler
- maximo_asset_health_insights
- maximo_for_aviation
- maximo_equipment_maintenance_assistant
- maximo_enterprise_adapter
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')