Design/Logic Flaw

2019-07-1714:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

JSON

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033.

CPENameOperatorVersion
jazz_for_service_managementge1.1.3.0
jazz_for_service_managementle1.1.3.2

CPE	Name	Operator	Version
	jazz_for_service_management	ge	1.1.3.0
	jazz_for_service_management	le	1.1.3.2

References

www.ibm.com/support/docview.wss?uid=ibm10885989

exchange.xforce.ibmcloud.com/vulnerabilities/159033