CVE-2023-26280

Published: Nov 25, 2024Modified: Jan 16, 2025

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.

Affected (2)

Products: Ibm: Jazz Foundation

Ibm

1 product

Jazz Foundation

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Foundation	Version 7.0.2
Ibm Jazz Foundation	Version 7.0.3

Related CWEs

CWE-266

Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References (1)

https://www.ibm.com/support/pages/node/7176207

Source: psirt@us.ibm.com

Not ApplicableVendor Advisory

Timeline

No history available yet.