8.8
CVE-2016-9977
- EPSS 1.81%
- Veröffentlicht 07.06.2017 17:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginIBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Maximo Asset Management Version 7.1
Ibm ≫ Maximo Asset Management Version 7.5
Ibm ≫ Maximo Asset Management Version 7.6
Ibm ≫ Maximo Asset Management Essentials Version 7.1
Ibm ≫ Maximo Asset Management Essentials Version 7.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.81% | 0.758 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.ibm.com/support/docview.wss?uid=swg22003981
http://www.securityfocus.com/bid/98786
https://exchange.xforce.ibmcloud.com/vulnerabilities/120253