{"id":"CVE-2019-4084","aliases":["EUVD-2019-13691","GHSA-6jjx-h773-4c26"],"status":"published","title":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1...","description":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/UI:N/AV:N/PR:L/S:U/I:N/C:L/AC:L/A:N/RC:C/E:U/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00984,"percentile":0.62573,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-06-27T13:45:29Z","modified":"2026-06-17T02:36:07Z","products":[{"vendor":"ibm","product":"rational collaborative lifecycle management"},{"vendor":"ibm","product":"rational_collaborative_lifecycle_management"},{"vendor":"ibm","product":"rational_doors_next_generation"},{"vendor":"ibm","product":"rational_engineering_lifecycle_manager"},{"vendor":"ibm","product":"rational_quality_manager"},{"vendor":"ibm","product":"rational_rhapsody_design_manager"},{"vendor":"ibm","product":"rational_software_architect_design_manager"},{"vendor":"ibm","product":"rational_team_concert"}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10956525","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/157384","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4084"},{"url":"https://github.com/advisories/GHSA-6jjx-h773-4c26"}],"sources":{"cve":[{"id":"CVE-2019-4084","description":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.","status":"published","published":"2019-06-27T13:45:29.805Z","modified":"2024-09-16T22:46:44.228Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/UI:N/AV:N/PR:L/S:U/I:N/C:L/AC:L/A:N/RC:C/E:U/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:25.303966Z"}],"euvd":[{"id":"EUVD-2019-13691","description":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.","status":"published","published":"2019-06-27T13:45:29Z","modified":"2024-09-16T22:46:44Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/UI:N/AV:N/PR:L/S:U/I:N/C:L/AC:L/A:N/RC:C/E:U/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:54:59.7394Z"}],"ghsa":[{"id":"GHSA-6jjx-h773-4c26","title":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1...","description":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.","status":"published","published":"2022-05-24T16:48:45Z","modified":"2023-02-02T05:02:45Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:51:30.862811Z"}],"nvd":[{"id":"CVE-2019-4084","description":"IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.","status":"published","published":"2019-06-27T14:15:10.58Z","modified":"2026-06-17T02:36:07.55Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:17.695191Z"}]}}
