ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2020-4495

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.
An official patch is available. Apply the patch as soon as possible.
8.8
CVSS
6.8
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsPresent
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21PoCE: U→P5.2 → 6.8
2026-07-21nvdpatch: Unavailable→Official Patch5.2 → 5.2
2026-07-21cve.orginitial, patch: Unavailable5.2
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
ibmcollaborative_lifecycle_management6.0.6
ibmcollaborative_lifecycle_management6.0.6.1
IBMEngineering Lifecycle Optimization7.0
IBMEngineering Lifecycle Optimization7.0.1
IBMEngineering Lifecycle Optimization7.0.2
IBMEngineering Test Management7.0.0
IBMEngineering Test Management7.0.1
ibmengineering_lifecycle_management7.0
ibmengineering_lifecycle_management7.0.1
ibmengineering_lifecycle_management7.0.2
ibmengineering_lifecycle_optimization_-_engineering_insights7.0
ibmengineering_lifecycle_optimization_-_engineering_insights7.0.1
ibmengineering_lifecycle_optimization_-_engineering_insights7.0.2
ibmengineering_lifecycle_optimization_-_publishing7.0
ibmengineering_lifecycle_optimization_-_publishing7.0.1
ibmengineering_lifecycle_optimization_-_publishing7.0.2
ibmengineering_test_management7.0.0
ibmengineering_test_management7.0.1
IBMRational Collaborative Lifecycle Management6.0.6
IBMRational Collaborative Lifecycle Management6.0.6.1
IBMRational DOORS Next Generation6.0.6
IBMRational DOORS Next Generation6.0.6.1
IBMRational DOORS Next Generation7.0
IBMRational DOORS Next Generation7.0.1
IBMRational DOORS Next Generation7.0.2
IBMRational Engineering Lifecycle Manager6.0.6
IBMRational Engineering Lifecycle Manager6.0.6.1
IBMRational Engineering Lifecycle Manager7.0
IBMRational Engineering Lifecycle Manager7.0.1
IBMRational Engineering Lifecycle Manager7.0.2
IBMRational Quality Manager6.0.6
IBMRational Quality Manager6.0.6.1
IBMRational Rhapsody Model Manager6.0.6
IBMRational Rhapsody Model Manager6.0.6.1
IBMRational Rhapsody Model Manager7.0
ibmrational_doors_next_generation6.0.6
ibmrational_doors_next_generation6.0.6.1
ibmrational_doors_next_generation7.0
ibmrational_doors_next_generation7.0.1
ibmrational_doors_next_generation7.0.2
ibmrational_engineering_lifecycle_manager6.0.6
ibmrational_engineering_lifecycle_manager6.0.6.1
ibmrational_quality_manager6.0.6
ibmrational_quality_manager6.0.6.1
ibmremovable_media_manager6.0.6
ibmremovable_media_manager6.0.6.1
ibmremovable_media_manager7.0
Published: 2021-06-02