PT-2016-3793

CVE-2015-7470

·

Publicado

2016-01-17

·

Atualizado

2016-01-21

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011 IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005
Description The issue allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors, as demonstrated by login information.
Recommendations For IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011, update to version 5.0.2-Rational-CLM-ifix011 or later. For IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005, update to version 6.0.0-Rational-CLM-ifix005 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Identificadores relacionados
CVE-2015-7470
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com