ibm-jazz-cve20204974-ssrf (192434)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/192434 CVE-2020-4974
MEDIUM
Record summary
CVE-2020-4974 has a selected CVSS score of 6.3 (medium).
Description
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
Description source: CVE List
Affected products and versions
8| Product | Source | Version range | Status |
|---|---|---|---|
Engineering Lifecycle OptimizationBrowse IBM / Engineering Lifecycle Optimization | CVE List | 7.0 | affected |
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Engineering Test ManagementBrowse IBM / Engineering Test Management | CVE List | 7.0.0 | affected |
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Engineering Workflow ManagementBrowse IBM / Engineering Workflow Management | CVE List | 7.0 | affected |
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Rational Collaborative Lifecycle ManagementBrowse IBM / Rational Collaborative Lifecycle Management | CVE List | 6.0.2 | affected |
| 6.0.6 | affected | ||
| 6.0.6.1 | affected | ||
Rational DOORS Next GenerationBrowse IBM / Rational DOORS Next Generation | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
| 7.0 | affected | ||
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Rational Engineering Lifecycle ManagerBrowse IBM / Rational Engineering Lifecycle Manager | CVE List | 6.0.2 | affected |
| 6.0.6 | affected | ||
| 6.0.6.1 | affected | ||
Rational Quality ManagerBrowse IBM / Rational Quality Manager | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
Rational Team ConcertBrowse IBM / Rational Team Concert | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-4974 ibm.comConfirmation
https://www.ibm.com/support/pages/node/6475919