CVE-2024-45077 — IBM Maximo Asset Management file upload
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with …
Published: 2025-01-24 · CVSS: 6.5 · CVSS 3.1
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7