CVE-2020-4544: Medium severity IBM RMM vulnerability

Q: What is the severity of CVE-2020-4544?

The severity of CVE-2020-4544 is medium.

Q: How does CVE-2020-4544 affect IBM Jazz Foundation Products?

CVE-2020-4544 allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

Q: What is the impact of CVE-2020-4544?

The impact of CVE-2020-4544 is that the obtained sensitive information could be used in further attacks against the system.

Q: What software versions are affected by CVE-2020-4544?

IBM Jazz Foundation Products version 6.0.2, 6.0.6, and 6.0.6.1 are affected.

Q: Are there any fixes or patches available for CVE-2020-4544?

To mitigate the vulnerability, it is advised to refer to IBM's official support pages for more information on available fixes and patches.

Published Jan 7, 2021

Updated

IBM Jazz Foundation could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Other sources

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.

Affected Software

67 affected components

IBM RMM<=6.0.6.1

IBM RMM<=6.0.6

IBM RMM<=7.0

IBM RMM<=7.0.1

IBM RMM<=6.0.2

IBM RELM<=6.0.6.1

IBM RELM<=6.0.6

IBM ENI<=7.0

IBM ENI<=7.0.1

IBM RELM<=6.0.2

IBM EWM<=7.0.1

IBM RTC<=6.0.6

IBM RTC<=6.0.2

IBM RTC<=6.0.6.1

IBM EWM<=7.0

IBM CLM<=6.0.6.1

IBM CLM<=6.0.6

IBM ELM<=7.0

IBM ELM<=7.0.1

IBM CLM<=6.0.2

IBM Rhapsody DM<=6.0.6

IBM Rhapsody DM<=6.0.6.1

IBM Rhapsody DM<=6.0.2

IBM RDM<=7.0

IBM RDM<=7.0.1

IBM RQM<=6.0.6.1

IBM RQM<=6.0.6

IBM ETM<=7.0.0

IBM RQM<=6.0.2

IBM RDNG<=6.0.2

IBM DOORS Next<=7.0

IBM DOORS Next<=7.0.1

IBM RDNG<=6.0.6.1

IBM RDNG<=6.0.6

IBM Collaborative Lifecycle Management=6.0.2

IBM Collaborative Lifecycle Management=6.0.6

IBM Collaborative Lifecycle Management=6.0.6.1

IBM DOORS Next=7.0

IBM DOORS Next=7.0.1

IBM Engineering Insights=7.0

IBM Engineering Insights=7.0.1

IBM Engineering Lifecycle Management=7.0

IBM Engineering Lifecycle Management=7.0.1

IBM Engineering Test Management=7.0.0

IBM Engineering Workflow Management=7.0

IBM Engineering Workflow Management=7.0.1

IBM Rational DOORS Next Generation=6.0.2

IBM Rational DOORS Next Generation=6.0.6

IBM Rational DOORS Next Generation=6.0.6.1

IBM Rational Engineering Lifecycle Manager=6.0.6

IBM Rational Engineering Lifecycle Manager=6.0.6.1

IBM Rational Quality Manager=6.0.2

IBM Rational Quality Manager=6.0.6

IBM Rational Quality Manager=6.0.6.1

IBM Rational Rhapsody Design Manager=6.0.2

IBM Rational Rhapsody Design Manager=6.0.6

IBM Rational Rhapsody Design Manager=6.0.6.1

IBM Rational Team Concert=6.0.2

IBM Rational Team Concert=6.0.6

IBM Rational Team Concert=6.0.6.1

IBM Reference Data Management=7.0

IBM Reference Data Management=7.0.1

IBM Rhapsody Model Manager=6.0.2

IBM Rhapsody Model Manager=6.0.6

IBM Rhapsody Model Manager=6.0.6.1

IBM Rhapsody Model Manager=7.0

IBM Rhapsody Model Manager=7.0.1

Event History

Jan 7, 2021

CVE Published

via IBM·12:00 AM

Jan 8, 2021

CVE Published

via MITRE·08:40 PM

Data Sourced

via MITRE·08:40 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6398742

Frequently Asked Questions

What is the severity of CVE-2020-4544?

The severity of CVE-2020-4544 is medium.

How does CVE-2020-4544 affect IBM Jazz Foundation Products?

CVE-2020-4544 allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

What is the impact of CVE-2020-4544?