CVE-2017-1370: Medium severity ibm jazz reporting service vulnerability
Published Jul 31, 2017
·Updated
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863.
Affected Software
8 affected components
IBM Jazz Reporting Service=5.0
IBM Jazz Reporting Service=5.0.1
IBM Jazz Reporting Service=5.0.2
IBM Jazz Reporting Service=6.0
IBM Jazz Reporting Service=6.0.1
IBM Jazz Reporting Service=6.0.2
IBM Jazz Reporting Service=6.0.3
IBM Jazz Reporting Service=6.0.4
Event History
Jul 31, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1370?
CVE-2017-1370 has a moderate severity due to its ability to disclose sensitive information.
2
How do I fix CVE-2017-1370?
To fix CVE-2017-1370, update the IBM Jazz Reporting Service to the latest available version.
3
What versions of IBM Jazz Reporting Service are affected by CVE-2017-1370?
CVE-2017-1370 affects IBM Jazz Reporting Service versions 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, and 6.0.4.
4
What type of information could be exposed in CVE-2017-1370?
CVE-2017-1370 could potentially expose sensitive information including user credentials.
5
Can CVE-2017-1370 be exploited remotely?
CVE-2017-1370 can be exploited remotely through the Report Builder administrator configuration page.