CVE-2016-8924

IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session…

published April 26, 2017

CVSS
—
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 118537.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00770 · 54.9th percentile
Published
2017-04-26T17:00Z
EPSS history
Timeline
  • 26 APR 17:00Z
    IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session…
    cvelistv5