ibm-jazz-cve202120347-ssrf (194596)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/194596 CVE-2021-20347
MEDIUM
Record summary
CVE-2021-20347 has a selected CVSS score of 5.4 (medium).
Description
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.
Description source: CVE List
Affected products and versions
7| Product | Source | Version range | Status |
|---|---|---|---|
Engineering Lifecycle OptimizationBrowse IBM / Engineering Lifecycle Optimization | CVE List | 7.0 | affected |
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Engineering Test ManagementBrowse IBM / Engineering Test Management | CVE List | 7.0.0 | affected |
| 7.0.1 | affected | ||
Rational Collaborative Lifecycle ManagementBrowse IBM / Rational Collaborative Lifecycle Management | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
Rational DOORS Next GenerationBrowse IBM / Rational DOORS Next Generation | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
| 7.0 | affected | ||
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Rational Engineering Lifecycle ManagerBrowse IBM / Rational Engineering Lifecycle Manager | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
| 7.0 | affected | ||
| 7.0.1 | affected | ||
| 7.0.2 | affected | ||
Rational Quality ManagerBrowse IBM / Rational Quality Manager | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
Rational Rhapsody Model ManagerBrowse IBM / Rational Rhapsody Model Manager | CVE List | 6.0.6 | affected |
| 6.0.6.1 | affected | ||
| 7.0 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-20347 ibm.comConfirmation
https://www.ibm.com/support/pages/node/6457739