PT-2016-3792

CVE-2015-7469

·

Published

2016-01-17

·

Updated

2016-01-21

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011 IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005
Description The issue allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role.
Recommendations For IBM Jazz Reporting Service (JRS) versions 5.x before 5.0.2-Rational-CLM-ifix011, update to version 5.0.2-Rational-CLM-ifix011 or later. For IBM Jazz Reporting Service (JRS) versions 6.0 before 6.0.0-Rational-CLM-ifix005, update to version 6.0.0-Rational-CLM-ifix005 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2015-7469
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com