CVE-2016-8924
IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 118537.
- Score
- CVSS 3.0 5.6 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2017-04-26
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
References
- http://www.ibm.com/support/docview.wss?uid=swg21996256
- http://www.securityfocus.com/bid/98023
