CVE-2020-4495

Summary

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.

Affected Software

VendorProductVersion RangeStatus
IBMEngineering Test Management7.0.0affected
IBMEngineering Test Management7.0.1affected
IBMRational Quality Manager6.0.6affected
IBMRational Quality Manager6.0.6.1affected
IBMRational Rhapsody Model Manager6.0.6affected
IBMRational Rhapsody Model Manager6.0.6.1affected
IBMRational Rhapsody Model Manager7.0affected
IBMEngineering Lifecycle Optimization7.0affected
IBMEngineering Lifecycle Optimization7.0.1affected
IBMEngineering Lifecycle Optimization7.0.2affected
IBMRational Engineering Lifecycle Manager6.0.6affected
IBMRational Engineering Lifecycle Manager6.0.6.1affected
IBMRational Engineering Lifecycle Manager7.0affected
IBMRational Engineering Lifecycle Manager7.0.1affected
IBMRational Engineering Lifecycle Manager7.0.2affected
IBMRational Collaborative Lifecycle Management6.0.6affected
IBMRational Collaborative Lifecycle Management6.0.6.1affected
IBMRational DOORS Next Generation6.0.6affected
IBMRational DOORS Next Generation6.0.6.1affected
IBMRational DOORS Next Generation7.0affected
IBMRational DOORS Next Generation7.0.1affected
IBMRational DOORS Next Generation7.0.2affected

Weaknesses

  • Bypass Security

ADP Enrichment

CVE Program Container

Additional References

References