Description
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Jazz Reporting Service | 7.0.2, 7.0.3 | — |
References
- https://www.ibm.com/support/pages/node/7229760 vendor-advisory patch