Vulnerability in IBM Rational Quality Manager
CVE-2019-4603
IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.
EPSS: 0.007 (51.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Ibm Rational Quality Manager — versions 6.0.2, 6.0.6, 6.0.6.1
- Ibm Rational_quality_manager — versions 6.0.2, 6.0.6, 6.0.6.1
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)
Frequently asked questions
- What is CVE-2019-4603?
- CVE-2019-4603 is a medium-severity vulnerability in IBM Rational Quality Manager, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 4.3/10. Published 2020-04-08.
- How severe is CVE-2019-4603?
- Medium severity. CVSS v3 base score is 4.3 out of 10.