CVE-2015-7466: Medium severity ibm jazz reporting service vulnerability
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7466?
CVE-2015-7466 is considered to have a medium severity level due to its potential impact on LDAP query restrictions.
How do I fix CVE-2015-7466?
To fix CVE-2015-7466, update to IBM Jazz Reporting Service version 6.0.0-Rational-CLM-ifix005 or later.
Who is affected by CVE-2015-7466?
Remote authenticated users of IBM Jazz Reporting Service version 6.0 before the specified fix are affected by CVE-2015-7466.
What can be exploited through CVE-2015-7466?
CVE-2015-7466 can be exploited to conduct LDAP injection attacks, allowing attackers to bypass query restrictions.
What systems are at risk with CVE-2015-7466?
Systems running IBM Jazz Reporting Service 6.0 without the latest fixes are at risk of CVE-2015-7466 vulnerabilities.