Description
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://www.securityfocus.com/bid/62685Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77920?_ga=2.229912220.1881683942.1582039056-713214152.1572980240VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/235239Vendor Advisory
- http://www.securityfocus.com/bid/62685Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77920?_ga=2.229912220.1881683942.1582039056-713214152.1572980240VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/235239Vendor Advisory
Timeline
- Published
- Feb 18, 2020
- Last modified
- Jun 16, 2026
- NVD status
- Modified