VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 8, 2016· Updated Jun 17, 2026

CVE-2016-2889

CVE-2016-2889

Description

Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the authentication of arbitrary users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • IBM/Jazz Reporting Service7 versions
    cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ibm:jazz_reporting_service:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: <5.0.2 ifix016 / <6.0.1 ifix005 / <6.0.2 ifix002

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.