← back
CVE-2020-4495

CVE-2020-4495

CVSS 8.8 HIGHEPSS 2.6%
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.
CVSS:3.0/AV:N/PR:L/I:H/AC:L/A:H/UI:N/S:U/C:H/E:U/RL:O/RC:C
Affected products
IBM · Engineering Lifecycle OptimizationIBM · Engineering Test ManagementIBM · Rational Collaborative Lifecycle ManagementIBM · Rational DOORS Next GenerationIBM · Rational Engineering Lifecycle ManagerIBM · Rational Quality ManagerIBM · Rational Rhapsody Model Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/182114https://www.ibm.com/support/pages/node/6457739