high7.8
CVE-2019-4591
IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system.
Impact
IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 167451.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | from 7.6.0.0 before 7.6.0.10 from 7.6.1.0 before 7.6.1.1 |