CVE-2020-4487

CVSS 4.3 MEDIUMEPSS 1.0%

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.

CVSS:3.0/PR:L/A:N/S:U/C:L/AC:L/UI:N/AV:N/I:N/RC:C/E:U/RL:O

Affected products

IBM · Engineering Lifecycle Optimization IBM · Engineering Test Management IBM · Engineering Workflow Management IBM · Rational Collaborative Lifecycle Management IBM · Rational DOORS Next Generation IBM · Rational Engineering Lifecycle Manager IBM · Rational Quality Manager IBM · Rational Rhapsody Design Manager IBM · Rational Rhapsody Model Manager IBM · Rational Team Concert

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/181862 https://www.ibm.com/support/pages/node/6398742