CVE-2016-9977

Published: Jun 7, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.

Affected (5)

Products: Ibm: Maximo Asset Management, Maximo Asset Management Essentials

Ibm

2 products

Maximo Asset Management

Maximo Asset Management Essentials

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.1
Ibm Maximo Asset Management	Version 7.5
Ibm Maximo Asset Management	Version 7.6
Ibm Maximo Asset Management Essentials	Version 7.1
Ibm Maximo Asset Management Essentials	Version 7.5