CVE-2015-7466

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors.

Score

CVSS 3.0 3.1 Low

Status

Modified - psirt@us.ibm.com

Published

2016-01-10

Last modified

2024-08-06

Weaknesses

CWE-74

Affected products

• Jazz Reporting Service (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21972484