CVE-2019-4291 Information disclosure in Maximo Anywhere

What is CVE-2019-4291?

CVE-2019-4291 is a medium-severity vulnerability in IBM Maximo Anywhere, published on 16 Feb 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697.

Weakness: CWE-326

Which versions are affected by CVE-2019-4291?

It affects 1 product.

Products include Ibm Maximo Anywhere.

How do I fix CVE-2019-4291?

No fix has been published for CVE-2019-4291 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-4291 being exploited?

There is no known exploitation of CVE-2019-4291 in the wild and no public exploit code.

Other vulnerabilities in IBM Maximo Anywhere

• CVE-2017-1604 Cross-site scripting in Maximo Anywhere Medium 5.4
• CVE-2015-4945 Security feature bypass in n/a Medium 5.0
• CVE-2019-4286 Information disclosure in Maximo Anywhere Medium 4.3
• CVE-2019-4288 Information disclosure in Maximo Anywhere Medium 4.3
• CVE-2019-4349 Information disclosure in Maximo Anywhere Low 3.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-78gp-57mf-h678.