IBM Maximo Application Suite Authentication Bypass Vulnerability Allowing Unauthorized Access

An authentication bypass vulnerability has been identified in IBM Maximo Application Suite versions 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4. This vulnerability could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application. The issue is particularly noted in the Maximo Manage component when used with standalone Cognos Analytics, where MXCSP is employed for integration.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the application, allowing attackers to interact with the application as an authenticated user.

Remediation

Users are advised to upgrade to the latest version of IBM Maximo Application Suite. Instructions for upgrading can be found on the IBM Fix Central website.