CVE-2024-52890

概要

参考情報

• ibm.com/support/pages/node/7241392 · Vendor Advisory

engineering lifecycle optimization のその他の脆弱性

• CVE-2023-45191高 7.5IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brut…
• CVE-2023-45190中 6.1IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the…
• CVE-2023-45187高 8.8IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authentica…
• CVE-2021-29844高 8.8IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthor…
• CVE-2021-29786中 6.5IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.