CVE-2024-25051

IBM Jazz Reporting Service insufficient session expiration PUBLISHED

Description (CNA)

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.

Affected (CNA)

Vendor / product	Versions
IBM / Jazz Reporting Service	affected 7.0.2; affected 7.0.3

CWE

CWE-613

References

https://www.ibm.com/support/pages/node/7229760

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.