IBM Jazz Reporting Service Session Management Vulnerability Allowing User Impersonation

A vulnerability exists in IBM Jazz Reporting Service versions 7.0.2 and 7.0.3, where the application fails to properly invalidate user sessions after logout. This flaw could enable an authenticated privileged user to impersonate another user on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized user impersonation, allowing an attacker to assume the identity of another user within the application.

Remediation

Users on IBM Jazz Reporting Service versions 7.0.1, 7.0.2, or any version prior to 7.0.3 should upgrade to version 7.0.3, where this vulnerability has been addressed. Users can also upgrade to the latest 7.1.0 version. Instructions for downloading the 7.0.3 version are available on the IBM Support Fix Central website.