CVE-2024-3325
Publication date 10 July 2024
Last updated 24 July 2024
Ubuntu priority
Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.
Read the notes from the security team
Why is this CVE low priority?
Requires enabling a JDBC driver by the admin to exploit
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| jasperreports | 24.10 oracular | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Notes
sbeattie
from the advisory: A systems administrator must enable/disable JDBC driver upload functionality for the JasperReports Server Superuser. It is disabled by default. Only Superuser can upload drivers when it is enabled