Phishing Vulnerability in IBM Jazz Team Server Products
CVE-2020-4964

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Rational Rhapsody Model Manager
Engineering Lifecycle Optimization
Engineering Workflow Management
Rational Collaborative Lifecycle Management
Vendor
CVE Published:
12 April 2021

What is CVE-2020-4964?

IBM Jazz Team Server products are susceptible to a vulnerability that enables an authenticated user to send customized messages through the application interface. This manipulation could potentially be leveraged by attackers to phish unsuspecting users, posing a significant risk to the integrity and security of user interactions. It is crucial for organizations using these products to remain vigilant and implement necessary security measures to protect against such exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Engineering Lifecycle Optimization 7.0

Engineering Lifecycle Optimization 7.0.1

Engineering Lifecycle Optimization 7.0.2

References

https://www.ibm.com/support/pages/node/6441803
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/192419
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.