Security Bulletin: IBM Jazz Reporting Service is vulnerable to Information Disclosure (CVE-2024-25052)

Summary If Jazz Authentication Service is enabled, IBM Jazz Reporting System shows the JSA Client Secret in plain text. Vulnerability Details CVEID:CVE-2024-25052 DESCRIPTION: IBM Jazz Reporting Service stores user credentials in plain clear text which can be read by an Admin user. CVSS Base scor...

CVE-2016-2912

CVE-2016-2912 is associated with IBM Rational Publishing Engine (RPENG) – Document Builder. The IBM Security Bulletin states that RPENG 2.0.1 before ifix002 is vulnerable to cross‑site scripting: a remote authenticated attacker can inject arbitrary script/HTML via a crafted URL due to insufficien...