CVE-2025-15395

Published: Feb 2, 2026Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.

Affected (24)

Products: Ibm: Jazz Foundation

Ibm

1 product

Jazz Foundation

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Foundation	Version 7.0.3
Ibm Jazz Foundation	Version 7.0.3 ifix001
Ibm Jazz Foundation	Version 7.0.3 ifix002
Ibm Jazz Foundation	Version 7.0.3 ifix003
Ibm Jazz Foundation	Version 7.0.3 ifix004
Ibm Jazz Foundation	Version 7.0.3 ifix005
Ibm Jazz Foundation	Version 7.0.3 ifix006
Ibm Jazz Foundation	Version 7.0.3 ifix007
Ibm Jazz Foundation	Version 7.0.3 ifix008
Ibm Jazz Foundation	Version 7.0.3 ifix009
Ibm Jazz Foundation	Version 7.0.3 ifix010
Ibm Jazz Foundation	Version 7.0.3 ifix011
Ibm Jazz Foundation	Version 7.0.3 ifix012
Ibm Jazz Foundation	Version 7.0.3 ifix013
Ibm Jazz Foundation	Version 7.0.3 ifix014
Ibm Jazz Foundation	Version 7.0.3 ifix015
Ibm Jazz Foundation	Version 7.0.3 ifix016
Ibm Jazz Foundation	Version 7.0.3 ifix017
Ibm Jazz Foundation	Version 7.0.3 ifix018
Ibm Jazz Foundation	Version 7.1.0
Ibm Jazz Foundation	Version 7.1.0 ifix001
Ibm Jazz Foundation	Version 7.1.0 ifix002
Ibm Jazz Foundation	Version 7.1.0 ifix003
Ibm Jazz Foundation	Version 7.1.0 ifix004

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://www.ibm.com/support/pages/node/7258304

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.