IBM Jazz Reporting Service Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Jazz Reporting Service, specifically in versions 7.1 through 7.1iFix006 and 7.0.3 to 7.0.3iFix020. This vulnerability allows an authenticated user on the host network to cause service degradation by using specially crafted SQL queries that consume excessive memory resources.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to consume excessive memory resources and potentially degrade system performance.

Remediation

Users are advised to upgrade to IBM Jazz Reporting Service version 7.1iFix007 or 7.0.3iFix021. Instructions for downloading these fixes are available on the IBM Support Fix Central website.