CVE-2017-1352

CVE-2017-1352 describes a command injection vulnerability in IBM Maximo Asset Management versions 7.5 and 7.6. An authenticated attacker could inject malicious commands into work orders, which would then execute when another user downloads the affected file. This medium severity vulnerability (CVSS 5.5) requires user interaction and authenticated access, potentially leading to limited impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.