Code injection

2017-06-0717:29:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.7%

JSON

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user’s session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user’s session. IBM X-Force ID: 120253.

CPENameOperatorVersion
maximo_asset_managementeq7.5
maximo_asset_managementeq7.1
maximo_asset_managementeq7.6
maximo_asset_management_essentialseq7.5
maximo_asset_management_essentialseq7.1

Name	Operator	Version
maximo_asset_management	eq	7.5
maximo_asset_management	eq	7.1
maximo_asset_management	eq	7.6
maximo_asset_management_essentials	eq	7.5
maximo_asset_management_essentials	eq	7.1