6.5
CVSSv2

CVE-2016-9977

Published: 07/06/2017 Updated: 12/06/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote malicious user to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm maximo asset management 7.5

ibm maximo asset management 7.6

ibm maximo asset management essentials 7.1

ibm maximo asset management essentials 7.5

ibm maximo asset management 7.1