IBM Engineering Lifecycle Management - Jazz Foundation
Moderate fix3 remedies
cpe:2.3:a:ibm:jazz_foundation:*:*:*:*:*:*:*
Moderate fix3 remedies
- >= 7.0.3, <= 7.0.3 iFix019
- >= 7.1.0, <= 7.1.0 iFix005
IBM Engineering Lifecycle Management Jazz Foundation Access Control Violation Vulnerability
Vulnerability
Patched
A vulnerability allowing access control violations has been identified in IBM Engineering Lifecycle Management - Jazz Foundation, affecting versions 7.0.3 prior to iFix019 and 7.1.0 prior to iFix005. This vulnerability allows users to view or access actions beyond their expected capabilities.
Impact
Exploitation of this vulnerability could lead to unauthorized access or actions beyond a user's assigned permissions.
Remediation
Users are advised to upgrade to IBM Engineering Lifecycle Management - Jazz Foundation version 7.0.3 iFix020 or 7.1.0 iFix006. Instructions for downloading these fixes are available on the IBM Support Fix Central website.
Added: Feb 2, 2026, 4:38 PM
Updated: Feb 2, 2026, 4:38 PM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
5.0exploitability
4.9remediation
7.7relevance
2.6threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.