CVE-2015-7464: High severity ibm jazz reporting service vulnerability

Published Jan 29, 2016

Updated

Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service (Report Builder server outage) via a crafted request to a Report Builder instance URL.

Affected Software

4 affected components

IBM Jazz Reporting Service=5.0

IBM Jazz Reporting Service=5.0.1

IBM Jazz Reporting Service=5.0.2

IBM Jazz Reporting Service=6.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21972485

Event History

Jan 29, 2016

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-7464?

CVE-2015-7464 has a severity rating that indicates it can cause a denial of service.

How do I fix CVE-2015-7464?

To fix CVE-2015-7464, upgrade to IBM Jazz Reporting Service version 5.0.2-Rational-CLM-ifix011 or 6.0.0-Rational-CLM-ifix005.

What types of systems are affected by CVE-2015-7464?

CVE-2015-7464 affects IBM Jazz Reporting Service versions 5.0, 5.0.1, 5.0.2, and 6.0.

Can CVE-2015-7464 be exploited remotely?

Yes, CVE-2015-7464 allows remote attackers to exploit the vulnerability and cause a server outage.

What is the impact of CVE-2015-7464?

The impact of CVE-2015-7464 is a denial of service, which can disrupt the availability of the Report Builder service.