Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-22475

Summary IBM TRIRIGA Application Platform discloses CVE-2020-22475 Vulnerability Details CVEID:CVE-2020-22475 DESCRIPTION: Tasks could provide weaker than expected security, caused by insecure permissions in VoiceCommandActivity. By sending a specially-crafted request, a remote attacker could...

CVE-2020-22475

"Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions...

CVE-2020-22475

CVE-2020-22475 affects IBM TRIRIGA Application Platform (VoiceCommandActivity) with insecure permissions that allow arbitrary applications to add tasks. The IBM security bulletin documents the vulnerability as stemming from the VoiceCommandActivity component, enabling unauthorized task additions ...