Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Jazz Reporting Service 信息泄露漏洞
Vulnerability Description
IBM Jazz Reporting Service（JRS）是美国IBM公司的一套用于发现跨项目报表的应用程序，它可与IBM Rational CLM的Rational解决方案（用于管理开发项目的所有生命周期）集成使用，CLM用户可在仪表板中访问JRS提供的报表，包括显示所有项目的状态，并跨应用程序、跨项目（甚至跨时间表）来汇聚数据。 IBM JRS中存在信息泄露漏洞。远程攻击者可通过发送直接的请求利用该漏洞获取敏感信息。以下版本受到影响：IBM Jazz Reporting Service 5.0，5
CVSS Information
N/A
Vulnerability Type
N/A