{"affected":[{"affectedData":[{"product":"Maximo Asset Management","vendor":"IBM","versions":[{"status":"affected","version":"7.6.1.0"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:maximo_asset_management:7.6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1E62D9C2-D670-4C11-8149-59730F0A3BD3","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:maximo_for_aviation:7.6.6:*:*:*:*:*:*:*","matchCriteriaId":"4317DA0E-678D-468F-8BE4-8BA20C01C588","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_aviation:7.6.7:*:*:*:*:*:*:*","matchCriteriaId":"5DB202BE-FF6E-49AC-84FF-F454361E5D4B","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_aviation:7.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C05DA047-26F7-413E-8259-5F88C08AE2B0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_life_sciences:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BA294D6-4D4D-4ADB-A05B-F578A8877A4D","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_nuclear_power:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"532219AE-9F4D-49B0-A625-A690C9E8A7DB","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"160EE7B0-4F54-41F7-9266-C22776783BA2","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"36062812-7AD2-4908-94BA-B06CA4503CB2","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"CC89A6D2-20D5-4066-8F35-2936C6D0C0A8","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_transportation:7.6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1BDF6664-537E-4CF8-9CCA-7C4746DE9B08","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7F416A57-7B00-411D-B2D5-5BCB434568DD","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:maximo_for_utilities:7.6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"73EEADC8-01D0-4D80-83E4-1643603485CD","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883."},{"lang":"es","value":"IBM Maximo Asset Management versión 7.6.1.0, podría permitir a un atacante remoto divulgar información confidencial a un usuario autentificado debido a una divulgación de información de la ruta en la URL. IBM X-Force ID: 172883."}],"id":"CVE-2019-4745","lastModified":"2026-06-17T02:36:52.757","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"psirt@us.ibm.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-24T16:15:12.517","references":[{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/172883"},{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/3245409"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/172883"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/3245409"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"nvd@nist.gov","type":"Primary"}]}