IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jazz_foundation | Ibm | 7.0.2 (including) | 7.0.2 (including) |
| Jazz_foundation | Ibm | 7.0.3 (including) | 7.0.3 (including) |