Medium · 5.3 CVE-2023-26280 EUVD-2023-30103GHSA-gw66-x3q6-f7fv

IBM Jazz Foundation improper access control

Published Nov 25, 2024 · Updated Nov 25, 2024 · Assigned by ibm

Description

IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.

Affected products

Vendor	Product	Affected	Fixed
IBM	Jazz Foundation	7.0.2, 7.0.3	—

References

https://www.ibm.com/support/pages/node/7176207