← CVE Intelligence

CVE-2016-5898

IBM Corporation / Jazz Reporting Service PUBLISHED

Description (CNA)

IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.

Affected (CNA)

Vendor / productVersions
IBM Corporation / Jazz Reporting Serviceaffected 6; affected 5.0; affected 5.0.1; affected 5.0.2; affected 6.0; affected 6.0.1; affected 6.0.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.