CVE-2020-4487: Medium severity IBM RMM vulnerability
IBM Engineering Workflow Management could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Other sources
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4487?
CVE-2020-4487 is a vulnerability that allows a remote attacker to obtain sensitive information in IBM Engineering Workflow Management.
What is the severity of CVE-2020-4487?
The severity of CVE-2020-4487 is medium with a CVSS score of 4.3.
Which products are affected by CVE-2020-4487?
The products affected by CVE-2020-4487 include IBM Collaborative Lifecycle Management, IBM DOORS Next, IBM Engineering Insights, IBM Engineering Lifecycle Management, IBM Engineering Test Management, and IBM Engineering Workflow Management, among others.
How can a remote attacker exploit CVE-2020-4487?
A remote attacker can exploit CVE-2020-4487 by sending a specially crafted request to the vulnerable system and obtaining sensitive information from the detailed technical error message returned in the browser.
Is there a fix for CVE-2020-4487?
Yes, IBM has provided fixes for the affected products. It is recommended to apply the latest security updates to mitigate the vulnerability.