IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863.
The product generates an error message that includes sensitive information about its environment, users, or associated data.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Jazz_reporting_service | Ibm | 5.0 (including) | 5.0 (including) |
Jazz_reporting_service | Ibm | 5.0.1 (including) | 5.0.1 (including) |
Jazz_reporting_service | Ibm | 5.0.2 (including) | 5.0.2 (including) |
Jazz_reporting_service | Ibm | 6.0 (including) | 6.0 (including) |
Jazz_reporting_service | Ibm | 6.0.1 (including) | 6.0.1 (including) |
Jazz_reporting_service | Ibm | 6.0.2 (including) | 6.0.2 (including) |
Jazz_reporting_service | Ibm | 6.0.3 (including) | 6.0.3 (including) |
Jazz_reporting_service | Ibm | 6.0.4 (including) | 6.0.4 (including) |