NVD

Id
16771  
Name
CVE-2016-0318  
Description
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by leveraging an unattended workstation.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-11-25  
Modified Date
2016-11-28  
Seq
2016-0318  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
93295 16771 CVE-2016-0318 http://www-01.ibm.com/support/docview.wss?uid=swg21983137  View
93296 16771 CVE-2016-0318 92466  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5245 JVNDB-2016-006018 IBM Jazz Reporting Service の Lifecycle Query Engine におけるアクセス権を取得される脆弱性 IBM Jazz Reporting Service の Lifecycle Query Engine (LQE) は、ログアウトの直後にセッション ID を破棄しないため、アクセス権を取得される脆弱性が存在します。 CVE-2016-0318 86522 CVE-2016-0318 16771 6 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006018.html 2016-08-12 2016-11-30 View