CVE-2024-37068

Published: Sep 7, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information using man in the middle techniques.

Affected (3)

Products: Ibm: Maximo Application Suite

Ibm

1 product

Maximo Application Suite

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Application Suite	Version 8.10
Ibm Maximo Application Suite	Version 8.11
Ibm Maximo Application Suite	Version 9.0

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/292799

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/7167725

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.