PT-2016-3791

CVE-2015-7468

·

Published

2016-01-17

·

Updated

2016-01-21

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011 IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005
Description The issue allows remote authenticated users to bypass intended restrictions on administrator tasks.
Recommendations For IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011, update to version 5.0.2-Rational-CLM-ifix011 or later. For IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005, update to version 6.0.0-Rational-CLM-ifix005 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2015-7468
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com