CVE-2020-4732

published 2021-06-02

CVE-2020-4732: IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM…

Priority P4 31 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126.

Affected

36 ranges · showing 25

Vendor	Product	Version range	Fixed in
ibm	collaborative_lifecycle_management	—	—
ibm	collaborative_lifecycle_management	—	—
ibm	engineering_lifecycle_management	—	—
ibm	engineering_lifecycle_management	—	—
ibm	engineering_lifecycle_management	—	—
ibm	engineering_lifecycle_optimization	—	—
ibm	engineering_lifecycle_optimization	—	—
ibm	engineering_lifecycle_optimization	—	—
ibm	engineering_lifecycle_optimization_engineering_insights	—	—
ibm	engineering_lifecycle_optimization_engineering_insights	—	—
ibm	engineering_lifecycle_optimization_engineering_insights	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_test_management	—	—
ibm	engineering_test_management	—	—
ibm	rational_collaborative_lifecycle_management	—	—
ibm	rational_collaborative_lifecycle_management	—	—
ibm	rational_doors_next_generation	—	—
ibm	rational_doors_next_generation	—	—
ibm	rational_doors_next_generation	—	—
ibm	rational_doors_next_generation	—	—
ibm	rational_doors_next_generation	—	—
ibm	rational_engineering_lifecycle_manager	—	—
ibm	rational_engineering_lifecycle_manager	—	—

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v3.0 4.3 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200