CVE-2015-7469

Published: Jan 17, 2016Modified: May 6, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role.

Affected (4)

Products: Ibm: Jazz Reporting Service

Ibm

1 product

Jazz Reporting Service

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Reporting Service	Version 5.0.1
Ibm Jazz Reporting Service	Version 5.0.2
Ibm Jazz Reporting Service	Version 5.0
Ibm Jazz Reporting Service	Version 6.0

Related CWEs

CWE-264

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21972485

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21972485

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.