CVE-2023-46186

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2024-02-14

Last modified

2025-05-08

Weaknesses

CWE-425

Affected products

• Jazz For Service Management (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/269929
• https://www.ibm.com/support/pages/node/7116830