PT-2016-3793 · Ibm · Ibm Jazz Reporting Service
Published
2016-01-17
·
Updated
2016-01-21
·
CVE-2015-7470
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011
IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005
Description
The issue allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors, as demonstrated by login information.
Recommendations
For IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011, update to version 5.0.2-Rational-CLM-ifix011 or later.
For IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005, update to version 6.0.0-Rational-CLM-ifix005 or later.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Jazz Reporting Service