{"id":"CVE-2017-1352","state":"PUBLISHED","title":"IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected fil","description":"IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.","publishedAt":"2017-09-12T21:00:00.000Z","updatedAt":"2024-09-16T17:08:59.295Z","severity":null,"assigner":"ibm","products":["IBM Maximo Asset Management"],"affected":[{"vendor":"IBM","product":"Maximo Asset Management","versions":[{"version":"7.5","status":"affected"},{"version":"7.6","status":"affected"}]}],"references":["http://www.ibm.com/support/docview.wss?uid=swg22006650","http://www.securityfocus.com/bid/100697","https://exchange.xforce.ibmcloud.com/vulnerabilities/126538"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:33.892Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/1xxx/CVE-2017-1352.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-1352","state":"PUBLISHED","datePublished":"2017-09-12T21:00:00.000Z","dateUpdated":"2024-09-16T17:08:59.295Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2016-11-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538."}],"affected":[{"vendor":"IBM","product":"Maximo Asset Management","versions":[{"version":"7.5","status":"affected"},{"version":"7.6","status":"affected"}]}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22006650","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/100697","name":"100697","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/126538","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Gain Privileges","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2017-09-13T09:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2017-09-06T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2017-09-06T00:00:00","ID":"CVE-2017-1352","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Maximo Asset Management","version":{"version_data":[{"version_value":"7.5"},{"version_value":"7.6"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Privileges"}]}]},"references":{"reference_data":[{"name":"http://www.ibm.com/support/docview.wss?uid=swg22006650","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg22006650"},{"name":"100697","refsource":"BID","url":"http://www.securityfocus.com/bid/100697"},{"name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/126538","refsource":"MISC","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/126538"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22006650","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/100697","name":"100697","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/126538","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T13:32:29.243Z"}}]}}}