PT-2019-16959 · Ibm · Ibm Jazz For Service Management
CVE-2019-4194
·
Published
2019-07-17
·
Updated
2022-12-09
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
IBM Jazz for Service Management versions 1.1.3 through 1.1.3.2
Description
The issue is related to missing function level access control, which could allow a user to delete authorized resources.
Recommendations
For versions 1.1.3 through 1.1.3.2, consider restricting access to sensitive resources until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ibm Jazz For Service Management