CVE-2016-0315

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain…

published July 8, 2016

CVSS
—
EPSS
1%
Percentile
63.1
In the wild
Unconfirmed
What it is

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01028 · 63.1th percentile
Published
2016-07-08T01:00Z
EPSS history
Timeline
  • 08 JUL 01:00Z
    The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain…
    cvelistv5