Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-4544 EUVD-2020-25791GHSA-hjq3-5xjw-j37q

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is retur…

Published Jan 8, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.

Affected products

VendorProductAffectedFixed
IBM Engineering Workflow Management 7.0, 7.0.1 —
IBM Rational Collaborative Lifecycle Management 6.0.2, 6.0.6, 6.0.6.1 —
IBM Rational Quality Manager 6.0.2, 6.0.6, 6.0.6.1 —
IBM Engineering Test Management 7.0.0 —
IBM Rational Engineering Lifecycle Manager 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.1 —
IBM Rational DOORS Next Generation 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.1 —
IBM Engineering Lifecycle Optimization 7.0, 7.0.1 —
IBM Rational Team Concert 6.0.2, 6.0.6, 6.0.6.1 —
IBM Rational Rhapsody Model Manager 6.0.6, 6.0.6.1, 7.0, 7.0.1, 6.0.2 —
IBM Rational Rhapsody Design Manager 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.1 —

References