Security Advisory

CVE-2015-7466

3.1
LOW

Vulnerability Description

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors.
Published Date January 10, 2016
Official Source NIST NVD Advisory