CVE-2020-4410

published 2020-08-04

CVE-2020-4410: IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	engineering_test_management	—	—
ibm	rational_rhapsody_design_manager	—	—
ibm	rational_rhapsody_design_manager	—	—
ibm	rational_rhapsody_design_manager	—	—

CWE-200