IBM Engineering Lifecycle Management Authentication Bypass Vulnerability Allowing Unauthorized Access

An authentication bypass vulnerability has been identified in IBM Engineering Lifecycle Management - Jazz Foundation, affecting versions 7.0.3 (through iFix021), 7.1.0 (through iFix009), and 7.2.0 (through iFix001). This vulnerability could allow an unauthenticated remote attacker to update server property files, potentially leading to unauthorized access to the application.

Impact

Exploitation of this vulnerability could result in unauthorized access to the application.

Remediation

Users are advised to upgrade to version 7.0.3 (iFix022), 7.1.0 (iFix010), or 7.2.0 (iFix002).