CVE-2016-0318

Severity: medium (CVSS 5.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-25 · updated 2026-06-17
Weakness: CWE-284

Description

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by leveraging an unattended workstation.

Affected products

IBM Jazz Reporting Service: 6.0, 6.0.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21983137
http://www.securityfocus.com/bid/92466
http://www-01.ibm.com/support/docview.wss?uid=swg21983137
http://www.securityfocus.com/bid/92466

Get alerted when CVE-2016-0318 or the next vulnerability affects your stack