IBM Jazz Reporting Service Lifecycle Query Engine LDAP Injection Vulnerability

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in conjunction with IBM Rational CLM's Rational solution for managing all the lifecycles of a development project. CLM users can access JRS-provided reports from a dashboard th...

PT-2016-3789

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0 before 6.0.0-Rational-CLM-ifix005 Description The issue allows remote authenticated users to conduct LDAP injection attacks. This can lead to bypassing intended query restrictions or modifying the LDA...

CVE-2015-7466: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors...