Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-4487 EUVD-2020-25734GHSA-vm7q-8rhw-2wwq

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is retur…

Published Jan 8, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.

Affected products

VendorProductAffectedFixed
IBM Engineering Lifecycle Optimization 7.0, 7.0.1 —
IBM Rational DOORS Next Generation 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.1 —
IBM Rational Rhapsody Model Manager 6.0.6, 6.0.6.1, 7.0, 7.0.1, 6.0.2 —
IBM Rational Rhapsody Design Manager 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.1 —
IBM Rational Team Concert 6.0.2, 6.0.6, 6.0.6.1 —
IBM Engineering Workflow Management 7.0, 7.0.1 —
IBM Rational Collaborative Lifecycle Management 6.0.2, 6.0.6, 6.0.6.1 —
IBM Engineering Test Management 7.0.0 —
IBM Rational Engineering Lifecycle Manager 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.1 —
IBM Rational Quality Manager 6.0.2, 6.0.6, 6.0.6.1 —

References