CVE-2025-15395

Summary

IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.

Affected Software

VendorProductVersion RangeStatus
IBMJazz Foundation7.0.3 <= 7.0.3 iFix019affected
IBMJazz Foundation7.1.0 <= 7.1.0 iFix005affected

Weaknesses

  • CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References