CVE-2024-25052: IBM Jazz Reporting Service information disclosure
Published Jun 13, 2024
·Updated
IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363.
Affected Software
1 affected component
IBM Jazz Reporting Service=7.0.3
Event History
Jun 13, 2024
CVE Published
via MITRE·01:45 PM
Data Sourced
via MITRE·01:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-25052?
CVE-2024-25052 is considered a high-severity vulnerability due to the exposure of user credentials in plain text.
2
How do I fix CVE-2024-25052?
To mitigate CVE-2024-25052, upgrade the IBM Jazz Reporting Service to a version that secures user credentials properly.
3
Who is affected by CVE-2024-25052?
CVE-2024-25052 affects users of IBM Jazz Reporting Service version 7.0.3.
4
What type of information is exposed in CVE-2024-25052?
CVE-2024-25052 exposes user credentials stored in plain clear text, which can be easily accessed by an admin user.
5
Can CVE-2024-25052 lead to further security issues?
Yes, CVE-2024-25052 can lead to unauthorized access and escalation of privileges if user credentials are compromised.