Information disclosure

2019-07-1120:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.4%

JSON

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032.

CPENameOperatorVersion
jazz_for_service_managementge1.1.3
jazz_for_service_managementle1.1.3.2

CPE	Name	Operator	Version
	jazz_for_service_management	ge	1.1.3
	jazz_for_service_management	le	1.1.3.2

References

www.ibm.com/support/docview.wss?uid=ibm10885985

www.securityfocus.com/bid/109144

exchange.xforce.ibmcloud.com/vulnerabilities/159032