Positive Teaching Management Information System web service management subsystem suffers from SQL injection vulnerability

Ortho mainly operates the entire business of universities and colleges such as basic platform, teaching management and service, student management and service, e-school affairs and digital resources. SQL injection vulnerability exists in the web service management subsystem of Zhengfang's teachin...

CVE-2019-4193

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

CVE-2019-4193

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

Information disclosure

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

CVE-2019-4193

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

CVE-2019-4193

IBM Jazz for Service Management versions 1.1.3–1.1.3.2 expose sensitive information via URL parameters, enabling potential disclosure if URLs are logged or exposed through referrers or browser history. The IBM advisory (and NVD entry) confirm the affected product and the risk vector, with CVSS de...

Security Bulletin: IBM Jazz for Service Management is missing function level access control that could allow a user to delete authorized resources (CVE-2019-4194)

Summary IBM Jazz for Service Management is missing function level access control that could allow a user to delete authorized resources Vulnerability Details CVEID: CVE-2019-4194 DESCRIPTION: IBM Jazz for Service Management is missing function level access control that could allow a user to delet...

PT-2019-16958 · Ibm · Ibm Jazz For Service Management

Name of the Vulnerable Software and Affected Versions: IBM Jazz for Service Management versions 1.1.3 through 1.1.3.2 Description: The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties gain access to the URLs...

IBM Jazz for Service Management Information Disclosure Vulnerability (CNVD-2019-32453)

IBM Jazz for Service Management is an integrated service management product from IBM that provides visibility into the service management environment. An information disclosure vulnerability exists in IBM Jazz for Service Management. An attacker could exploit the vulnerability to disclose...

Security Bulletin: IBM Jazz for Service Management stores sensitive information in URL parameters (CVE-2019-4193)

Summary IBM Jazz for Service Management stores sensitive information in URL parameters Vulnerability Details CVEID: CVE-2019-4193 DESCRIPTION: IBM Jazz for Service Management stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have acces...

Security Bulletin: Potential denial of service in WebSphere Application Server Admin Console shipped with Jazz for Service Management (CVE-2019-4080)

Summary There is a potential denial of service in the Admin Console of WebSphere Application Server shipped with Jazz for Service Management Vulnerability Details CVEID: CVE-2019-4080 DESCRIPTION: IBM WebSphere Application Server Admin Console is vulnerable to a potential denial of service, cause...

CVE-2019-4201

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

Open redirect

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2019-4201

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2019-4201

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2019-4201

CVE-2019-4201 affects IBM Jazz for Service Management versions 1.1.3–1.1.3.2. The issue is an open redirect vulnerability that could allow a remote attacker to perform phishing by guiding a victim to a crafted site, spoofing the URL and redirecting to a malicious site. IBM lists a CVSS base score...

IBM Jazz for Service Management Input Validation Error Vulnerability

IBM Jazz for Service Management is an integrated service management product from IBM that provides visibility into the service management environment. An input validation error vulnerability exists in IBM Jazz for Service Management. The vulnerability originates from a network system or product...

Security Bulletin: Jazz for Service Management (JazzSM) could allow a remote attacker to conduct phishing attacks, using an open redirect attack (CVE-2019-4201)

Summary Jazz for Service Management JazzSM could allow a remote attacker to conduct phishing attacks, using an open redirect attack CVE-2019-4201 Vulnerability Details CVEID: CVE-2019-4201 DESCRIPTION: IBM Jazz for Service Management could allow a remote attacker to conduct phishing attacks, usin...

Open Ticket Request System Information Disclosure Vulnerability (CNVD-2019-16544)

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software will be submitted by phone , e-mail and other channels of service requests into different queues , service levels , service personnel through the OTRS system t...

Security Bulletin: Weaker than expected security in WebSphere Application Server (shipped with Jazz for Service Management) with SP800-131 transition mode (CVE-2018-1996)

Summary There is a potential for weaker than expected security in WebSphere Application Server with SP800-131 transition mode and SSLTLSv2. Vulnerability Details CVEID: CVE-2018-1996 DESCRIPTION: IBM WebSphere Application Server could provide weaker than expected security, caused by the improper...