CVE-2013-3323

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management versions 6.2 through 7.5

Description: A Privilege Escalation issue exists when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.

Recommendations: For versions 6.2, 7.1, and 7.5, ensure that the authentication session is properly invalidated when using WebSeal with Basic Authentication. As a temporary workaround, consider restricting access to the WebSeal authentication module until a proper fix is applied.