CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-4495
High (8.8) in ibm. EPSS 2.6% chance of exploitation in the next 30 days.
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.
Severity
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:collaborative_lifecycle_management
- ibm:engineering_lifecycle_management
- ibm:engineering_lifecycle_optimization_-_engineering_insights
- ibm:engineering_lifecycle_optimization_-_publishing
- ibm:engineering_test_management
- ibm:rational_doors_next_generation
- ibm:rational_engineering_lifecycle_manager
- ibm:rational_quality_manager
- ibm:removable_media_manager