Jazz Foundation Vulnerability: Improper Access Control Exposes Dashboard Changes

CVE-2023-26280

What is CVE-2023-26280?

IBM Jazz Foundation versions 7.0.2 and 7.0.3 contain a vulnerability that enables users to alter their dashboards through specially crafted HTTP requests. This flaw arises from improper access control mechanisms, which can be exploited to gain unauthorized access to user settings. Organizations utilizing these versions should implement necessary updates and review security protocols to protect against potential exploitation.

References