Description
IBM Maximo MXAPIASSET API是美国国际商业机器（IBM）公司的一个远程资产监控应用程序接口。 IBM Maximo MXAPIASSET API 7.6.1.3版本存在路径遍历漏洞，该漏洞源于允许远程攻击者查看系统上的任意文件。
IBM Maximo MXAPIASSET API 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-45652
https://cvefeed.io/vuln/detail/CVE-2024-45652
https://github.com/advisories/GHSA-8wj4-rrqm-qqmx
https://www.ibm.com/support/pages/security-bulletin-ibm-maximo-asset-management-application-vulnerable-allow-remote-attacker-traverse-directories-system-cve-2024-45652
https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-45652
https://cert.kenet.or.ke/cve-2024-45652-ibm-maximo-mxapiasset-path-traversal-vulnerability
https://cve.imfht.com/detail/CVE-2024-45652
https://www.nsfocus.net/index.php?act=sec_bug&type_id=&os=&keyword=&page=1474