{"id":"CVE-2019-4603","aliases":["EUVD-2019-14210","GHSA-mmhw-p74f-f3j3"],"status":"published","title":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create...","description":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/I:L/PR:L/C:N/AC:L/UI:N/AV:N/A:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00749,"percentile":0.55183,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2020-04-08T14:05:42Z","modified":"2026-06-17T02:36:42Z","products":[{"vendor":"ibm","product":"rational quality manager"},{"vendor":"ibm","product":"rational_quality_manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6172629","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/168295","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-4603"},{"url":"https://github.com/advisories/GHSA-mmhw-p74f-f3j3"}],"sources":{"cve":[{"id":"CVE-2019-4603","description":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.","status":"published","published":"2020-04-08T14:05:42.274Z","modified":"2024-09-17T00:37:11.211Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/I:L/PR:L/C:N/AC:L/UI:N/AV:N/A:N/RC:C/RL:O/E:U","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:25.303966Z"}],"euvd":[{"id":"EUVD-2019-14210","description":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.","status":"published","published":"2020-04-08T14:05:42Z","modified":"2024-09-17T00:37:11Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/I:L/PR:L/C:N/AC:L/UI:N/AV:N/A:N/RC:C/RL:O/E:U","level":"medium"}],"updated_at":"2026-11-03T00:28:57.378482Z"}],"ghsa":[{"id":"GHSA-mmhw-p74f-f3j3","title":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create...","description":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.","status":"published","published":"2022-05-24T17:13:47Z","modified":"2023-01-29T05:02:21Z","updated_at":"2026-11-02T14:45:03.903455Z"}],"nvd":[{"id":"CVE-2019-4603","description":"IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.","status":"published","published":"2020-04-08T14:15:12.787Z","modified":"2026-06-17T02:36:42.563Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:05:46.451008Z"}]}}