CVE-2025-27550

Published: Feb 4, 2026Modified: Feb 23, 2026

3.5

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.1 / Impact: 1.4

Source: psirt@us.ibm.com

Description

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.

Affected (28)

Products: Ibm: Jazz Reporting Service

Ibm

1 product

Jazz Reporting Service

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Reporting Service	Version 7.0.3
Ibm Jazz Reporting Service	Version 7.0.3 ifix001
Ibm Jazz Reporting Service	Version 7.0.3 ifix002
Ibm Jazz Reporting Service	Version 7.0.3 ifix003
Ibm Jazz Reporting Service	Version 7.0.3 ifix004
Ibm Jazz Reporting Service	Version 7.0.3 ifix005
Ibm Jazz Reporting Service	Version 7.0.3 ifix006
Ibm Jazz Reporting Service	Version 7.0.3 ifix007
Ibm Jazz Reporting Service	Version 7.0.3 ifix008
Ibm Jazz Reporting Service	Version 7.0.3 ifix009
Ibm Jazz Reporting Service	Version 7.0.3 ifix010
Ibm Jazz Reporting Service	Version 7.0.3 ifix011
Ibm Jazz Reporting Service	Version 7.0.3 ifix012
Ibm Jazz Reporting Service	Version 7.0.3 ifix013
Ibm Jazz Reporting Service	Version 7.0.3 ifix014
Ibm Jazz Reporting Service	Version 7.0.3 ifix015
Ibm Jazz Reporting Service	Version 7.0.3 ifix016
Ibm Jazz Reporting Service	Version 7.0.3 ifix017
Ibm Jazz Reporting Service	Version 7.0.3 ifix018
Ibm Jazz Reporting Service	Version 7.0.3 ifix019
Ibm Jazz Reporting Service	Version 7.0.3 ifix020
Ibm Jazz Reporting Service	Version 7.1
Ibm Jazz Reporting Service	Version 7.1 ifix001
Ibm Jazz Reporting Service	Version 7.1 ifix002
Ibm Jazz Reporting Service	Version 7.1 ifix003
Ibm Jazz Reporting Service	Version 7.1 ifix004-sr1-base
Ibm Jazz Reporting Service	Version 7.1 ifix005
Ibm Jazz Reporting Service	Version 7.1 ifix006

Related CWEs

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (1)

https://www.ibm.com/support/pages/node/7258083

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.