CVE-2016-5898

Published: Feb 1, 2017Modified: May 13, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.

Affected (6)

Products: Ibm: Jazz Reporting Service

Ibm

1 product

Jazz Reporting Service

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Reporting Service	Version 5.0.1
Ibm Jazz Reporting Service	Version 5.0.2
Ibm Jazz Reporting Service	Version 5.0
Ibm Jazz Reporting Service	Version 6.0.1
Ibm Jazz Reporting Service	Version 6.0.2
Ibm Jazz Reporting Service	Version 6.0

Related CWEs

CWE-254

References (4)

http://www.ibm.com/support/docview.wss?uid=swg21991154

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/94848

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www.ibm.com/support/docview.wss?uid=swg21991154

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/94848

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.