Security Bulletin: The IBM® Engineering Lifecycle Engineering displays sensitive Information on ADMIN page (CVE-2022-34355).

Summary Application displays Sensitive Information related to the backend technologies like JVM, DB Version, Application Server on ADMIN page. Vulnerability Details CVEID:CVE-2022-34355 DESCRIPTION: IBM Jazz Foundation could disclose sensitive version information to a user that could be used in...

CVE-2022-34355

CVE-2022-34355 affects IBM Jazz Foundation / IBM Engineering Lifecycle Management. Affected versions disclose sensitive version information to a user, which could be used in further attacks. Affected products and versions: CLM 6.0.6 and 6.0.6.1; ELM 7.0, 7.0.1, 7.0.2. Remediation (as per IBM bull...