CVE-2020-4547

Summary

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.

Affected Software

VendorProductVersion RangeStatus
IBMEngineering Workflow Management7.0affected
IBMEngineering Workflow Management7.0.2affected
IBMRational Engineering Lifecycle Manager7.0affected
IBMRational Rhapsody Model Manager6.0.6affected
IBMRational Rhapsody Model Manager6.0.6.1affected
IBMRational Rhapsody Model Manager7.0affected
IBMRational Rhapsody Model Manager6.0.2affected
IBMEngineering Lifecycle Optimization7.0affected
IBMEngineering Test Management7.0.0affected
IBMRational Rhapsody Design Manager6.0.2affected
IBMRational Rhapsody Design Manager6.0.6affected
IBMRational Rhapsody Design Manager6.0.6.1affected
IBMRational Quality Manager6.0.2affected
IBMRational Quality Manager6.0.6affected
IBMRational Quality Manager6.0.6.1affected
IBMRational Team Concert6.0.2affected
IBMRational Team Concert6.0.6affected
IBMRational Team Concert6.0.6.1affected
IBMRational Collaborative Lifecycle Management6.0.2affected
IBMRational Collaborative Lifecycle Management6.0.6affected
IBMRational Collaborative Lifecycle Management6.0.6.1affected
IBMRational DOORS Next Generation6.0.2affected
IBMRational DOORS Next Generation6.0.6affected
IBMRational DOORS Next Generation6.0.6.1affected
IBMRational DOORS Next Generation7.0affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References