CVE-2019-4603
CVE-2019-4603
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Apr 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295.
CVSS:3.0/S:U/I:L/PR:L/C:N/AC:L/UI:N/AV:N/A:N/RC:C/RL:O/E:U
Affected products
IBM · Rational Quality Manager