CVE-2016-0318
MEDIUMIBM Jazz Reporting Service <6.0.1 iFix006 - Info Disclosure
Title source: llmDescription
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by leveraging an unattended workstation.
Scores
CVSS v3
5.0
EPSS
0.0036
EPSS Percentile
57.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-284
Status
published
Affected Products (3)
ibm/jazz_reporting_service
ibm/jazz_reporting_service
n/a/n/a
Timeline
Published
Nov 25, 2016
Tracked Since
Feb 18, 2026