CVE-2019-4047: IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files...

Security readout for executives and security teams

IBM Jazz Reporting Service 6.0.6 has an information disclosure issue where an authenticated user could access execution log files as a guest user. Those logs may reveal details about server execution. The issue is medium severity and requires a valid account, so urgency depends on whether JRS is deployed and who has login access. Exposure appears limited to organizations running IBM Jazz Reporting Service 6.0.6 with authenticated users who can reach the service. The sources do not identify other affected versions, CPEs, or deployment patterns. Treat this as a targeted confidentiality risk, not an emergency unless JRS 6.0.6 is internet-reachable or broadly accessible internally. Prioritize inventory and vendor remediation during the next security maintenance cycle. Mitigation focus: Confirm whether IBM Jazz Reporting Service 6.0.6 is present.; Review IBM advisory guidance and apply the vendor-recommended fix.; Restrict JRS access to trusted authenticated users..

Prepared

Jun 1, 2026, 14:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.