{"id":"CVE-2025-15395","state":"PUBLISHED","title":"IBM Jazz Foundation access control violation","description":"IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.","publishedAt":"2026-02-02T15:10:56.983Z","updatedAt":"2026-02-02T16:45:31.338Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Jazz Foundation"],"affected":[{"vendor":"IBM","product":"Jazz Foundation","defaultStatus":"unaffected","versions":[{"version":"7.0.3","status":"affected","lessThanOrEqual":"7.0.3 iFix019","versionType":"semver"},{"version":"7.1.0","status":"affected","lessThanOrEqual":"7.1.0 iFix005","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix019:*:*:*:*:*:*","cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix005:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7258304"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/15xxx/CVE-2025-15395.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-15395","state":"PUBLISHED","datePublished":"2026-02-02T15:10:56.983Z","dateUpdated":"2026-02-02T16:45:31.338Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2025-12-31T14:28:58.770Z"},"containers":{"cna":{"title":"IBM Jazz Foundation access control violation","descriptions":[{"lang":"en","value":"IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability."}],"affected":[{"vendor":"IBM","product":"Jazz Foundation","defaultStatus":"unaffected","versions":[{"version":"7.0.3","status":"affected","lessThanOrEqual":"7.0.3 iFix019","versionType":"semver"},{"version":"7.1.0","status":"affected","lessThanOrEqual":"7.1.0 iFix005","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix019:*:*:*:*:*:*","cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:jazz_foundation:7.1.0:ifix005:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7258304","tags":["vendor-advisory","patch"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","description":"CWE-863 Incorrect Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-02-02T15:10:56.983Z"},"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>IBM recommends customers on ELM 7.0.1, 7.0.2 or any version below 7.0.3 to upgrade your products to Maintenance release 7.0.3 and apply below fix.</p><p>Optionally, upgrade to the latest 7.2.0 version.</p><div><table><tbody><tr><td><strong>Affected Product(s)</strong></td><td><strong>Version(s)</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td><p>IBM Engineering Lifecycle Management - Jazz Foundation</p></td><td>7.0.3</td><td>Download and install <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Engineering&amp;product=ibm/Rational/IBM+Engineering+Lifecycle+Management&amp;release=7.0.3&amp;platform=All&amp;function=fixId&amp;fixids=7.0.3-IBM-ELM-iFix020&amp;includeRequisites=0&amp;includeSupersedes=0&amp;downloadMethod=http\">iFix020</a>&nbsp;or later</td></tr><tr><td><p>IBM Engineering Lifecycle Management - Jazz Foundation</p></td><td>7.1.0</td><td>Download and install <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Engineering&amp;product=ibm/Rational/IBM+Engineering+Lifecycle+Management&amp;release=7.1&amp;platform=All&amp;function=fixId&amp;fixids=7.1-IBM-ELM-iFix006&amp;includeRequisites=0&amp;includeSupersedes=0&amp;downloadMethod=http\">iFix006</a>&nbsp;or later</td></tr></tbody></table></div><br><br>"}],"value":"IBM recommends customers on ELM 7.0.1, 7.0.2 or any version below 7.0.3 to upgrade your products to Maintenance release 7.0.3 and apply below fix.\n\nOptionally, upgrade to the latest 7.2.0 version.\n\nAffected Product(s)Version(s)Remediation/Fix/InstructionsIBM Engineering Lifecycle Management - Jazz Foundation\n\n7.0.3Download and install  iFix020 https://www.ibm.com/support/fixcentral/swg/downloadFixes  or laterIBM Engineering Lifecycle Management - Jazz Foundation\n\n7.1.0Download and install  iFix006 https://www.ibm.com/support/fixcentral/swg/downloadFixes  or later"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-02T16:44:58.231516Z","id":"CVE-2025-15395","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-02T16:45:31.338Z"}}]}}}