4.3
Medium
CVE-2020-4964 IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a…
Description
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rational Rhapsody Model Manager 7.0 | 7.0 → 7.0.1 | No fix stated |
| Rational Rhapsody Model Manager 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
| Engineering Lifecycle Optimization 7.0 | 7.0 → 7.0.2 | No fix stated |
| Engineering Workflow Management 7.0 | 7.0 → 7.0.2 | No fix stated |
| Rational Collaborative Lifecycle Management 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
| Rational DOORS Next Generation 7.0 | 7.0 → 7.0.2 | No fix stated |
| Rational DOORS Next Generation 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
| Engineering Test Management 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| Rational Engineering Lifecycle Manager 7.0 | 7.0 → 7.0.1 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Rational Engineering Lifecycle Manager 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
| Rational Quality Manager 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
| Rational Team Concert 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
Other CVEs of Rational Rhapsody Model Manager
The 27 CVEs of Rational Rhapsody Model Manager →
CVE-2021-29670
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
5.4
Medium
CVE-2021-20371
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an…
4.3
Medium
CVE-2021-29668
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
5.4
Medium
CVE-2021-20348
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
5.4
Medium