Security Bulletin: IBM TRIRIGA Application Platform Privilege Escalation (CVE-2016-0342)

Summary The IBM TRIRIGA Application platform grants the ability to access to read or modify a report that the user does not have privileges for. Vulnerability Details CVEID: CVE-2016-0342 DESCRIPTION: CVSS Base Score: 5.4 CVSS Temporal Score: See for the current score CVSS Environmental Score:...

CVE-2016-0342

CVE-2016-0342 affects IBM TRIRIGA Application Platform 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.3), and 3.5 (before 3.5.0.1). The root cause is an incorrect grant of access that allows remote authenticated users to read or modify reports they should not access. The IBM bulletin lists remediation v...