IBM Jazz Reporting Service SPARQL Endpoint Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Jazz Reporting Service, specifically within the Lifecycle Query Engine (LQE) SPARQL endpoints. This vulnerability could allow an authenticated user on the host network to access sensitive information about other projects stored on the server. The issue affects IBM Jazz Reporting Service versions 7.1 through 7.1iFix006 and 7.0.3 to 7.0.3iFix020.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information about projects on the server, potentially allowing for misuse or unauthorized actions related to that information.

Remediation

Users are advised to upgrade to IBM Jazz Reporting Service version 7.1iFix007 or 7.0.3iFix021. Instructions for downloading these fixes are available on the IBM Support Fix Central website.