CVE-2017-1370

published 2017-07-31

CVE-2017-1370: IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder…

medium 4.9 CVSS 3.0

AV N AC L PR H UI N S U C H I N A N

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—

CWE-209