CVE-2024-35144

Published: Jan 25, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid in further attacks against the system.

Affected (3)

Products: Ibm: Maximo Application Suite

Ibm

1 product

Maximo Application Suite

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Application Suite	From 8.10 to 8.10.14
Ibm Maximo Application Suite	From 8.11 to 8.11.11
Ibm Maximo Application Suite	Version 9.0

Related CWEs

CWE-540

Inclusion of Sensitive Information in Source Code

Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.

References (1)

https://www.ibm.com/support/pages/node/7174953

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.