OSVDB ID: 16161

Title: MRO Maximo Nonexecutable File Remote Disclosure

Info

Disclosure

May 05, 2005

Discovery

Unknown

Dates

Exploit

May 05, 2005

Solution

Unknown

Description

Maximo contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the integrated Tomcat server fails to protect nonexecutable files, which will disclose file content information for the files left unprotected resulting in a loss of confidentiality.

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Public
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

MRO Software

Maximo

4
5

References

Credit

  • Felix - felix.shnirbms.com -


Direct URL: http://osvdb.org/16161