{"id":"CVE-2019-4457","aliases":["EUVD-2019-14064","GHSA-rc7x-cfxf-7qxv"],"status":"published","title":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an...","description":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/A:N/PR:L/AC:L/C:L/S:U/UI:N/AV:N/I:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00899,"percentile":0.59894,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2020-02-19T15:15:44Z","modified":"2026-06-17T02:36:33Z","products":[{"vendor":"ibm","product":"jazz_foundation"},{"vendor":"ibm","product":"rational rhapsody design manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/2867997","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/163654","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4457"},{"url":"https://github.com/advisories/GHSA-rc7x-cfxf-7qxv"}],"sources":{"cve":[{"id":"CVE-2019-4457","description":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.","status":"published","published":"2020-02-19T15:15:44.644Z","modified":"2024-09-16T17:49:02.373Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/A:N/PR:L/AC:L/C:L/S:U/UI:N/AV:N/I:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:25.303966Z"}],"euvd":[{"id":"EUVD-2019-14064","description":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.","status":"published","published":"2020-02-19T15:15:44Z","modified":"2024-09-16T17:49:02Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/A:N/PR:L/AC:L/C:L/S:U/UI:N/AV:N/I:N/E:U/RC:C/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:55:38.288771Z"}],"ghsa":[{"id":"GHSA-rc7x-cfxf-7qxv","title":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an...","description":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.","status":"published","published":"2022-05-24T17:09:20Z","modified":"2023-01-29T05:01:35Z","updated_at":"2026-11-02T14:44:51.691892Z"}],"nvd":[{"id":"CVE-2019-4457","description":"IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.","status":"published","published":"2020-02-19T16:15:11.547Z","modified":"2026-06-17T02:36:33.163Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:43.875329Z"}]}}