CVE-2016-0318

—

CVSS 3.0

5.0 medium

EPSS

<1%p46

Published

Nov 25, 2016 (Nov 25, 2016)

Modified

Jun 17, 2026

Description

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by leveraging an unattended workstation.

Vendors: ibm
Products: jazz reporting service
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.