🔙 목록으로 돌아가기

CVE-2020-4463: IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

TitleIBM Maximo Asset Management Information Disclosure - XML External Entity Injection
Authordwisiswant0
SeverityHigh
ImpactThe vulnerability can lead to unauthorized access to sensitive information or a denial of service.
RemediationApply the latest security patches or updates provided by IBM to mitigate the vulnerability.
CVSS Score8.2
EPSS Score0.90034
CVE IDCVE-2020-4463
CWE IDCWE-611
Shodan Queryhttp.favicon.hash:-399298961
Fofa Queryicon_hash=-399298961
Tags cve cve2020 ibm xxe disclosure vkev vuln

🔍 Vulnerability Description

IBM Maximo Asset Management is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

🌐 HTTP Request

POST /os/mxperson HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:70.0) Gecko/20100101 Firefox/70.0
Connection: close
Content-Length: 164
Accept: */*
Accept-Language: en
Content-Type: application/xml
Accept-Encoding: gzip

<?xml version='1.0' encoding='UTF-8'?>

<max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>

  <max:MXPERSONQuery></max:MXPERSONQuery>

</max:QueryMXPERSON>
POST /meaweb/os/mxperson HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36
Connection: close
Content-Length: 164
Accept: */*
Accept-Language: en
Content-Type: application/xml
Accept-Encoding: gzip

<?xml version='1.0' encoding='UTF-8'?>

<max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>

  <max:MXPERSONQuery></max:MXPERSONQuery>

</max:QueryMXPERSON>

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4463.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-4463.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A