CVE-2019-4084

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

Vendor	Product	Versions
IBM	Rational Collaborative Lifecycle Management	6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.0.6; 6.0.6.1

References

http://www.ibm.com/support/docview.wss?uid=ibm10956525Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/157384VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10956525Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/157384VDB Entry, Vendor Advisory

Timeline

Published: Jun 27, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-40866.1IBM Cloud Application Performance Management 8.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading CVE-2019-40879.8IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds check CVE-2019-40887.8IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused b CVE-2019-40905.4"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."CVE-2019-40915.4"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, CVE-2019-40926.1IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuadin CVE-2019-40934.4IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Clie CVE-2019-40947.8IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted CVE-2019-40954.3IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized act CVE-2019-40985.4IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co CVE-2019-41015.5IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have CVE-2019-41025.9IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorith