CVE-2016-0315 in Jazz Reporting Service

Tóm tắt

Bởi VulDB • 01/06/2026

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Đặt trước: 08/12/2015
• Tiết lộ: 07/07/2016
• Kiểm duyệt: được chấp nhận
• mục: VDB-88814
• CPE: sẵn sàng
• CWE: CWE-284 (Đã xác nhận)
• CVSS: 8.8 (NVD)
• EPSS: 0.01028
• KEV: không
• Các hoạt động: rất thấp
• ngành: Government, Pharma, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0315
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0315
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0315/