Phishing Vulnerability in IBM Jazz Team Server Products
CVE-2020-4964

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Rational Rhapsody Model Manager
Engineering Lifecycle Optimization
Engineering Workflow Management
Rational Collaborative Lifecycle Management
Vendor
CVE Published:
12 April 2021

Summary

IBM Jazz Team Server products are susceptible to a vulnerability that enables an authenticated user to send customized messages through the application interface. This manipulation could potentially be leveraged by attackers to phish unsuspecting users, posing a significant risk to the integrity and security of user interactions. It is crucial for organizations using these products to remain vigilant and implement necessary security measures to protect against such exploitation.

Affected Version(s)

Engineering Lifecycle Optimization 7.0

Engineering Lifecycle Optimization 7.0.1

Engineering Lifecycle Optimization 7.0.2

References

https://www.ibm.com/support/pages/node/6441803
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/192419
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.