1. Home
  2. CVE Database
  3. CVE-2020-4409
HIGH · 8.2

CVE-2020-4409

IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote...

Vulnerability Description

IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 179537.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
IbmControl Desk7.6.1
IbmMaximo Asset Configuration Manager7.6.6
IbmMaximo Asset Health Insights7.6.1
IbmMaximo Asset Management< 7.6.1.2
IbmMaximo Asset Management Scheduler7.6.7
IbmMaximo Asset Management Scheduler Plus7.6.7
IbmMaximo Calibration7.6
IbmMaximo Enterprise Adapter7.6
IbmMaximo Equipment Maintenance Assistant-
IbmMaximo For Aviation7.6.6
IbmMaximo For Life Sciences7.6
IbmMaximo For Nuclear Power7.6.1
IbmMaximo For Oil And Gas7.6.1
IbmMaximo For Service Providers7.6.3.1
IbmMaximo For Transportation7.6.2.3
IbmMaximo For Utilities7.6.0.1
IbmMaximo Linear Asset Manager7.6.0
IbmMaximo Network On Blockchain7.6.0.0
IbmMaximo Spatial Asset Management7.6.0.2
IbmTivoli Integration Composer7.6

Related Weaknesses (CWE)

CWE-601

References

FAQ

What is CVE-2020-4409?

CVE-2020-4409 is a vulnerability with a CVSS score of 8.2 (HIGH). IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote...

How severe is CVE-2020-4409?

CVE-2020-4409 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-4409?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Control Desk, Ibm Maximo Asset Configuration Manager, Ibm Maximo Asset Health Insights, Ibm Maximo Asset Management, Ibm Maximo Asset Management Scheduler.