CVE-2016-0315 in Jazz Reporting Service
Summary
The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.
VulDB is the best source for vulnerability data and more expert information about this specific topic.