CVE-2016-0315

—

CVSS 3.0

8.8 high

EPSS

1%p62

Published

Jul 8, 2016 (Jul 8, 2016)

Modified

Jun 17, 2026

Description

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation.

Vendors: ibm
Products: jazz reporting service
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.