CVE-2021-29701

MEDIUM

IBM Engineering Workflow Management <7.0.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6539546
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/200657

Scores

CVSS v3 4.3
EPSS 0.0012
EPSS Percentile 30.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (5)
ibm/engineering_workflow_management 7.0
ibm/engineering_workflow_management 7.0.1
ibm/engineering_workflow_management 7.0.2
ibm/rational_team_concert 6.0.6
ibm/rational_team_concert 6.0.6.1
Published Jan 11, 2022
Tracked Since Feb 18, 2026