PT-2022-9044 · Ibm · Ibm Rational Team Concert+1

Published 2022-03-15 · Updated 2022-03-22 · CVE-2020-4989

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Engineering Workflow Management versions 7.0 through 7.0.2 IBM Rational Team Concert versions 6.0.0.1 through 6.0.6

Description The issue allows an authenticated user to obtain sensitive information about build definitions.

Recommendations For IBM Engineering Workflow Management versions 7.0 through 7.0.2, update to a version that contains a fix for this issue. For IBM Rational Team Concert versions 6.0.0.1 through 6.0.6, update to a version that contains a fix for this issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2020-4989

Affected Products

Ibm Engineering Workflow Management

Ibm Rational Team Concert

References · 4

• https://osv.dev/vulnerability/CVE-2020-4989 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4989 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/192707 · Vendor Advisory
• https://ibm.com/support/pages/node/6563261 · Vendor Advisory