CVE-2015-7465

Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2016-01-10

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Jazz Reporting Service (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21972484