CVE-2016-2889 | BDVDB-2026-76826 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the authentication of arbitrary users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/91766
http://www-01.ibm.com/support/docview.wss?uid=swg21983147

Exploit#

No public exploit known

History#

Version 12016-07-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.