Vulnerability Details : CVE-2019-4084
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
Products affected by CVE-2019-4084
- cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*
- IBM » Rational Software Architect Design ManagerVersions from including (>=) 6.0 and up to, including, (<=) 6.0.1cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*
- IBM » Rational Collaborative Lifecycle ManagementVersions from including (>=) 6.0 and up to, including, (<=) 6.0.6.1cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*
- IBM » Rational Doors Next GenerationVersions from including (>=) 6.0 and up to, including, (<=) 6.0.6.1cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*
- IBM » Rational Rhapsody Design ManagerVersions from including (>=) 6.0 and up to, including, (<=) 6.0.6.1cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*
- IBM » Rational Engineering Lifecycle ManagerVersions from including (>=) 6.0 and up to, including, (<=) 6.0.6.1cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-4084
0.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 48 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-4084
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
|
4.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
2.8
|
1.4
|
IBM Corporation | |
|
4.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
2.8
|
1.4
|
NIST |
References for CVE-2019-4084
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/157384
IBM Jazz Foundation information disclosure CVE-2019-4084 Vulnerability ReportVDB Entry;Vendor Advisory
-
http://www.ibm.com/support/docview.wss?uid=ibm10956525
IBM Security Bulletin: Security vulnerabilities affect multiple IBM Rational products based on IBM Jazz technologyVendor Advisory
Jump to