CVE-2026-3660

EPSS 0.58%
Veröffentlicht 26.05.2026 18:23:30
Zuletzt bearbeitet 24.07.2026 11:10:00
Erkennungen
Login

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 33 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update -

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix002

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix003

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix004

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix005

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix006

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix007

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix008

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix009

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix010

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix011

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix012

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix013

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix014

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix015

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix016

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix017

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix018

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix019

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix020

Ibm ≫ Engineering Lifecycle Management Version 7.0.3 Update ifix021

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update -

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix001

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix002

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix003

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix004

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix005

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix006

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix007

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix008

Ibm ≫ Engineering Lifecycle Management Version 7.1.0 Update ifix009

Ibm ≫ Engineering Lifecycle Management Version 7.2.0 Update -

Ibm ≫ Engineering Lifecycle Management Version 7.2.0 Update ifix001

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.58%	0.431

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.ibm.com/support/pages/node/7274079

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-3660

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-3660

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-3660

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-3660