← Back

CVE-2026-3660

nvd nist
Published: May 26, 2026Modified: May 29, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

Affected (33)

Ibm
1 product
Engineering Lifecycle Management
Configuration A
33 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Engineering Lifecycle Management
Version 7.0.3
Engineering Lifecycle Management
Version 7.0.3 ifix002
Engineering Lifecycle Management
Version 7.0.3 ifix003
Engineering Lifecycle Management
Version 7.0.3 ifix004
Engineering Lifecycle Management
Version 7.0.3 ifix005
Engineering Lifecycle Management
Version 7.0.3 ifix006
Engineering Lifecycle Management
Version 7.0.3 ifix007
Engineering Lifecycle Management
Version 7.0.3 ifix008
Engineering Lifecycle Management
Version 7.0.3 ifix009
Engineering Lifecycle Management
Version 7.0.3 ifix010
Engineering Lifecycle Management
Version 7.0.3 ifix011
Engineering Lifecycle Management
Version 7.0.3 ifix012
Engineering Lifecycle Management
Version 7.0.3 ifix013
Engineering Lifecycle Management
Version 7.0.3 ifix014
Engineering Lifecycle Management
Version 7.0.3 ifix015
Engineering Lifecycle Management
Version 7.0.3 ifix016
Engineering Lifecycle Management
Version 7.0.3 ifix017
Engineering Lifecycle Management
Version 7.0.3 ifix018
Engineering Lifecycle Management
Version 7.0.3 ifix019
Engineering Lifecycle Management
Version 7.0.3 ifix020
Engineering Lifecycle Management
Version 7.0.3 ifix021
Engineering Lifecycle Management
Version 7.1.0
Engineering Lifecycle Management
Version 7.1.0 ifix001
Engineering Lifecycle Management
Version 7.1.0 ifix002
Engineering Lifecycle Management
Version 7.1.0 ifix003
Engineering Lifecycle Management
Version 7.1.0 ifix004
Engineering Lifecycle Management
Version 7.1.0 ifix005
Engineering Lifecycle Management
Version 7.1.0 ifix006
Engineering Lifecycle Management
Version 7.1.0 ifix007
Engineering Lifecycle Management
Version 7.1.0 ifix008
Engineering Lifecycle Management
Version 7.1.0 ifix009
Engineering Lifecycle Management
Version 7.2.0
Engineering Lifecycle Management
Version 7.2.0 ifix001

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.