Missing Function Level Access Control in IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2

CVE-2019-4194 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033.

Learn more about our User Device Pen Test.