NetSight
medium5.4

CVE-2020-4547

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.

Impact

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.

Affected products

VendorProductAffected versions
IbmCollaborative Lifecycle Management
Versions 6.0.2, 6.0.6, 6.0.6.1
IbmEngineering Insights
Version 7.0
IbmEngineering Lifecycle Management
Version 7.0
IbmEngineering Requirements Management Doors Next
Versions 6.0.2, 6.0.6, 6.0.6.1, 7.0
IbmEngineering Test Management
Version 7.0.0
IbmEngineering Workflow Management
Versions 6.0.2, 6.0.6, 6.0.6.1, 7.0, 7.0.2
IbmGlobal Configuration Management
All versions
IbmRational Engineering Lifecycle Manager
Versions 6.0.2, 6.0.6, 6.0.6.1
IbmRational Quality Manager
Versions 6.0.2, 6.0.6, 6.0.6.1
IbmRhapsody Design Manager
Versions 6.0.2, 6.0.6, 6.0.6.1, 7.0
IbmRhapsody Model Manager
Versions 6.0.2, 6.0.6, 6.0.6.1, 7.0

Weakness classification

References