Aller au contenu
Se connecter
8.8 Élevée

CVE-2020-4495 IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused…

Description

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.

Produits et versions touchés

Produit Versions touchées Corrigé en
Engineering Test Management 7.0 7.0.0 → 7.0.1 Pas de correctif indiqué
Rational Quality Manager 6.0 6.0.6 → 6.0.6.1 Pas de correctif indiqué
Rational Rhapsody Model Manager 7.0 Pas de correctif indiqué
Rational Rhapsody Model Manager 6.0 6.0.6 → 6.0.6.1 Pas de correctif indiqué
Engineering Lifecycle Optimization 7.0 7.0 → 7.0.2 Pas de correctif indiqué
Rational Engineering Lifecycle Manager 7.0 7.0 → 7.0.2 Pas de correctif indiqué
Rational Engineering Lifecycle Manager 6.0 6.0.6 → 6.0.6.1 Pas de correctif indiqué
Rational Collaborative Lifecycle Management 6.0 6.0.6 → 6.0.6.1 Pas de correctif indiqué
Rational DOORS Next Generation 7.0 7.0 → 7.0.2 Pas de correctif indiqué
Afficher l’autre branche
Produit Versions touchées Corrigé en
Rational DOORS Next Generation 6.0 6.0.6 → 6.0.6.1 Pas de correctif indiqué

Autres CVE de Engineering Test Management

Les 39 CVE de Engineering Test Management →
CVE-2023-43054 IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting 6.4 Moyenne CVE-2021-38934 IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting 5.4 Moyenne CVE-2020-5004 IBM Jazz Foundation products are vulnerable to cross-site scripting 5.4 Moyenne CVE-2020-4974 IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) 6.3 Moyenne
Suivre cette CVE