CVE-2024-25051

Published: Apr 2, 2025Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.

Affected (2)

Products: Ibm: Jazz Reporting Service

Ibm

1 product

Jazz Reporting Service

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Ibm Jazz Reporting Service	Version 7.0.2
Ibm Jazz Reporting Service	Version 7.0.3

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (1)

https://www.ibm.com/support/pages/node/7229760

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.