The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016 and 6.x prior to 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm jazz reporting service 6.0.1 |
||
ibm jazz reporting service 5.0.2 |
||
ibm jazz reporting service 5.0 |
||
ibm jazz reporting service 6.0 |
||
ibm jazz reporting service 5.0.1 |
Vulmon