CVE-2024-25051 IBM Jazz Reporting Service insufficient session expiration
Authenticated users can impersonate others because sessions are not invalidated upon logout, requiring a patch to enforce proper session termination.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-25051?
CVE-2024-25051 is a medium-severity authentication bypass vulnerability in Ibm Jazz Reporting Service, published on 2 Apr 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
Weakness: CWE-613
Which versions are affected by CVE-2024-25051?
It affects 1 product.
Products include Ibm Jazz Reporting Service.
How do I fix CVE-2024-25051?
No fix has been published for CVE-2024-25051 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-25051 being exploited?
There is no known exploitation of CVE-2024-25051 in the wild and no public exploit code.
Other vulnerabilities in Ibm Jazz Reporting Service
Sources
Also known as GHSA-83mw-hrr9-5qq8.