CVE-2017-1176

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299.

Metrics

CVSS 3.0 3.3/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Maximo Asset Management	7.1; 7.5; 7.1.1; 7.6

References

http://www.ibm.com/support/docview.wss?uid=swg22005210Vendor Advisory
http://www.securityfocus.com/bid/99371Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/123299VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22005210Vendor Advisory
http://www.securityfocus.com/bid/99371Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/123299VDB Entry, Vendor Advisory

Timeline

Published: Jul 5, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-117608.8uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed CVE-2017-117615.3Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could poten CVE-2017-117628.8The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R CVE-2017-117638.8The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R CVE-2017-117647.5Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of th CVE-2017-117655.5The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold CVE-2017-117667.5Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c CVE-2017-117679.8ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles CVE-2017-117682.5Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Go CVE-2017-117697.8The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execut CVE-2017-11775.3IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further CVE-2017-117707.5.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web applicati