Description
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to read the dashboards of arbitrary users via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Sagenda-Free booking system PHP Object Injection (1.3.2)
Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7903)
WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (4.1)
WordPress Plugin Social Sharing-Social Warfare Cross-Site Scripting (3.5.3)
WordPress Plugin Chat-Support Board-WordPress Chat Privilege Escalation (3.3.8)