description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.
problem types: Gain Access
affected:
{
product: Maximo Asset Management
vendor: IBM
versions:
status: affected, version: 7.1
status: affected, version: 7.5
status: affected, version: 7.1.1
status: affected, version: 7.6
}