CVE-2020-4495

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control

High · published June 2, 2021

CVSS v3.0
8.8
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/PR:L/I:H/AC:L/A:H/UI:N/S:U/C:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.02648 · 85.5th percentile
Published
2021-06-02T20:40Z
EPSS history
Timeline
  • 02 JUN 20:40Z
    IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control
    cvelistv5