IBM Security Bulletin: Security vulnerability affects the Lifecycle Query Engine (LQE) that is shipped with Jazz Reporting Service (CVE-2017-1490)

There is a security vulnerability in the Lifecycle Query Engine (LQE) shipped with Jazz Reporting Service.

CVE(s): CVE-2017-1490

Affected product(s) and affected version(s):

Jazz Reporting Service 6.0, 6.0.1, 6.0.2, 6.0.3, and 6.0.4.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2h3TcDB
X-Force Database: http://ift.tt/2xZ4iNl

The post IBM Security Bulletin: Security vulnerability affects the Lifecycle Query Engine (LQE) that is shipped with Jazz Reporting Service (CVE-2017-1490) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2h2IYDr