CVE-2020-4964 - IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users

Back Back to CVE browser

MEDIUM

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users

Published Apr 12, 2021

4.3

MEDIUM

CVSS 3.1

EPSS 0.64%

Description

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.

Affected products

Vendor IBM Product Engineering Lifecycle Optimization Default
n/a
- Version
  7.0
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
- Version
  7.0.2
  Status
  affected
  Constraints
  -
Vendor IBM Product Engineering Test Management Default
n/a
- Version
  7.0.0
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
- Version
  7.0.2
  Status
  affected
  Constraints
  -
Vendor IBM Product Engineering Workflow Management Default
n/a
- Version
  7.0
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
- Version
  7.0.2
  Status
  affected
  Constraints
  -
Vendor IBM Product Rational Collaborative Lifecycle Management Default
n/a
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.6
  Status
  affected
  Constraints
  -
- Version
  6.0.6.1
  Status
  affected
  Constraints
  -
Vendor IBM Product Rational DOORS Next Generation Default
n/a
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.6
  Status
  affected
  Constraints
  -
- Version
  6.0.6.1
  Status
  affected
  Constraints
  -
- Version
  7.0
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
- Version
  7.0.2
  Status
  affected
  Constraints
  -
Vendor IBM Product Rational Engineering Lifecycle Manager Default
n/a
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.6
  Status
  affected
  Constraints
  -
- Version
  6.0.6.1
  Status
  affected
  Constraints
  -
- Version
  7.0
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
Vendor IBM Product Rational Quality Manager Default
n/a
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.6
  Status
  affected
  Constraints
  -
- Version
  6.0.6.1
  Status
  affected
  Constraints
  -
Vendor IBM Product Rational Rhapsody Model Manager Default
n/a
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.6
  Status
  affected
  Constraints
  -
- Version
  6.0.6.1
  Status
  affected
  Constraints
  -
- Version
  7.0
  Status
  affected
  Constraints
  -
- Version
  7.0.1
  Status
  affected
  Constraints
  -
Vendor IBM Product Rational Team Concert Default
n/a
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.6
  Status
  affected
  Constraints
  -
- Version
  6.0.6.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Engineering Lifecycle Optimization

n/a

Version	Status	Constraints
7.0	affected	-
7.0.1	affected	-
7.0.2	affected	-

IBM

Engineering Test Management

n/a

Version	Status	Constraints
7.0.0	affected	-
7.0.1	affected	-
7.0.2	affected	-

IBM

Engineering Workflow Management

n/a

Version	Status	Constraints
7.0	affected	-
7.0.1	affected	-
7.0.2	affected	-

IBM

Rational Collaborative Lifecycle Management

n/a

Version	Status	Constraints
6.0.2	affected	-
6.0.6	affected	-
6.0.6.1	affected	-

IBM

Rational DOORS Next Generation

n/a

Version	Status	Constraints
6.0.2	affected	-
6.0.6	affected	-
6.0.6.1	affected	-
7.0	affected	-
7.0.1	affected	-
7.0.2	affected	-

IBM

Rational Engineering Lifecycle Manager

n/a

Version	Status	Constraints
6.0.2	affected	-
6.0.6	affected	-
6.0.6.1	affected	-
7.0	affected	-
7.0.1	affected	-

IBM

Rational Quality Manager

n/a

Version	Status	Constraints
6.0.2	affected	-
6.0.6	affected	-
6.0.6.1	affected	-

IBM

Rational Rhapsody Model Manager

n/a

Version	Status	Constraints
6.0.2	affected	-
6.0.6	affected	-
6.0.6.1	affected	-
7.0	affected	-
7.0.1	affected	-

IBM

Rational Team Concert

n/a

Version	Status	Constraints
6.0.2	affected	-
6.0.6	affected	-
6.0.6.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26211
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/192419
vdb-entryx_refsource_XFVDB Entry
https://www.ibm.com/support/pages/node/6441803
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26211		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/192419		vdb-entryx_refsource_XFVDB Entry
https://www.ibm.com/support/pages/node/6441803		x_refsource_CONFIRMPatchVendor Advisory