CVE-2016-9977

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session…

published June 7, 2017

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01812 · 78.4th percentile
Published
2017-06-07T17:00Z
EPSS history
Timeline
  • 07 JUN 17:00Z
    IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session…
    cvelistv5