IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF)
Published Jul 28, 2021
6.3
MEDIUMCVSS 3.1
EPSS 0.60%
Description
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
Affected products
-
Affected
- 7.0
- 7.0.1
- 7.0.2
-
Affected
- 7.0.0
- 7.0.1
- 7.0.2
-
Affected
- 7.0
- 7.0.1
- 7.0.2
-
Affected
- 6.0.2
- 6.0.6
- 6.0.6.1
-
Affected
- 6.0.6
- 6.0.6.1
- 7.0
- 7.0.1
- 7.0.2
-
Affected
- 6.0.2
- 6.0.6
- 6.0.6.1
-
Affected
- 6.0.6
- 6.0.6.1
-
Affected
- 6.0.6
- 6.0.6.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| IBM | Engineering Lifecycle Optimization | unknown | Affected
|
| IBM | Engineering Test Management | unknown | Affected
|
| IBM | Engineering Workflow Management | unknown | Affected
|
| IBM | Rational Collaborative Lifecycle Management | unknown | Affected
|
| IBM | Rational DOORS Next Generation | unknown | Affected
|
| IBM | Rational Engineering Lifecycle Manager | unknown | Affected
|
| IBM | Rational Quality Manager | unknown | Affected
|
| IBM | Rational Team Concert | unknown | Affected
|
- 7.0
- 7.0.1
- 7.0.2
- n/a
- 7.0.0
- 7.0.1
- 7.0.2
- 7.0
- 7.0.1
- 7.0.2
- 6.0.2
- 6.0.6
- 6.0.6.1
- 6.0.6
- 6.0.6.1
- 7.0
- 7.0.1
- 7.0.2
- 6.0.2
- 6.0.6
- 6.0.6.1
- 6.0.6
- 6.0.6.1
- 6.0.6
- 6.0.6.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26221 Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192434 vdb-entryx_refsource_XFVDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6475919 x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26221 | Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/192434 | vdb-entryx_refsource_XFVDB EntryVendor Advisory | |
| https://www.ibm.com/support/pages/node/6475919 | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data