CVE-2024-45652

Summary

CVE-2024-45652 is a vulnerability affecting IBM Maximo MXAPIASSET API version 7.6.1.3. This issue allows a remote attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences (/../). Successful exploitation could enable the attacker to view arbitrary files on the system. Organizations using this version of IBM Maximo MXAPIASSET API are advised to apply the available patch as soon as possible to mitigate this risk. Failure to do so could result in unauthorized file access and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.