CVE-2017-1370: IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentia...

Security readout for executives and security teams

IBM Jazz Reporting Service could reveal sensitive information, including user credentials, in an error message on the Report Builder administrator configuration page. The source bundle does not provide a CVSS score or confirm exploitation, so urgency depends on whether affected JRS versions remain deployed. Exposure is limited to environments running the listed IBM Jazz Reporting Service versions with Report Builder administrator configuration present. The bundle does not identify affected CPEs, prerequisite access, or whether related IBM products are impacted. Treat this as a targeted legacy-product exposure review. Credential disclosure can create downstream compromise risk, but the bundle lacks severity scoring and exploitation evidence. Prioritize if affected JRS versions are internet-facing, widely accessible, or still used in sensitive development workflows. Mitigation focus: Check IBM advisory swg22005868 for vendor-approved fixes or mitigations.; Inventory IBM Jazz Reporting Service versions across production and internal environments.; Restrict access to Report Builder administrator configuration pages to authorized administrators..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.