CVE-2019-4591

IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system

Medium · published July 13, 2020

CVSS v3.0
5.9
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 167451.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/S:U/C:L/A:L/AC:L/I:L/AV:L/UI:N/PR:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00269 · 17.9th percentile
Published
2020-07-13T14:10Z
EPSS history
Timeline
  • 13 JUL 14:10Z
    IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system
    cvelistv5