A vulnerability has been found in IBM Jazz for Service Management up to 1.1.3.25 and classified as problematic. The affected element is an unknown function. The manipulation leads to sensitive cookie without secure attribute.
This vulnerability is traded as CVE-2025-36249. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.