PT-2016-3792

CVE-2015-7469

·

Publicado

2016-01-17

·

Atualizado

2016-01-21

Descrição por

CVSS 2.0
4.0
Média
MétricasAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011 IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005
Description The issue allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role.
Recommendations For IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011, update to version 5.0.2-Rational-CLM-ifix011 or later. For IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005, update to version 6.0.0-Rational-CLM-ifix005 or later.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2015-7469
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com