VulnerabilityModified
CVE-2019-4275
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique catalog names that could cause a denial of service.
MEDIUM 5.5EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique catalog names that could cause a denial of service. IBM X-Force ID: 160296.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Affected
- ibm/jazz for service management
- Source
- psirt@us.ibm.com
References
- http://www.ibm.com/support/docview.wss?uid=ibm10959011Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160296VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=ibm10959011Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160296VDB Entry, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.