CVE-2016-0315 | BDVDB-2026-76823 Detail

Description#

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21983147

Exploit#

No public exploit known

History#

Version 12016-07-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.