CVE-2019-4457

MEDIUM

IBM Jazz Foundation <6.0.7 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/2867997
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/163654

Scores

CVSS v3 6.5
EPSS 0.0090
EPSS Percentile 55.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (1)
ibm/jazz_foundation 6.0.0 - 6.0.6.1
Published Feb 19, 2020
Tracked Since Feb 18, 2026