description: IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.
problem types: Obtain Information
affected:
{
product: Jazz Reporting Service
vendor: IBM Corporation
versions:
status: affected, version: 6
status: affected, version: 5.0
status: affected, version: 5.0.1
status: affected, version: 5.0.2
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
}