CVE-2020-4410: IBM Engineering Test Management

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539.

Affected products

• IBM Engineering Test Management: version 7.0.0 only
• IBM Rational Rhapsody Design Manager: version 6.0.2 only; version 7.0.0 only

Published 2020-08-04. Last modified 2026-06-17.