Medium
IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system.
Security/Authentication Bypass.
IBM
Update to latest version
https://www.ibm.com/support/pages/node/6245696