Information disclosure in IBM Rational Insight

CVE-2014-6115

IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Jazz Reporting Service (JRS) report URL.

Vulnerability class: Information Disclosure

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

Ibm Rational_insight — versions 1.1.1.5
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)