6.3
Medium
CVE-2020-4974 IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF)
Description
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering Test Management 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| Rational Team Concert 6.0 | 6.0.6 → 6.0.6.1 | No fix stated |
| Rational Quality Manager 6.0 | 6.0.6 → 6.0.6.1 | No fix stated |
| Rational DOORS Next Generation 7.0 | 7.0 → 7.0.2 | No fix stated |
| Rational DOORS Next Generation 6.0 | 6.0.6 → 6.0.6.1 | No fix stated |
| Rational Collaborative Lifecycle Management 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
| Engineering Workflow Management 7.0 | 7.0 → 7.0.2 | No fix stated |
| Engineering Lifecycle Optimization 7.0 | 7.0 → 7.0.2 | No fix stated |
| Rational Engineering Lifecycle Manager 6.0 | 6.0.2 → 6.0.6.1 | No fix stated |
Other CVEs of Engineering Test Management
The 39 CVEs of Engineering Test Management →
CVE-2023-43054
IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2021-38934
IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2020-5004
IBM Jazz Foundation products are vulnerable to cross-site scripting
5.4
Medium
CVE-2021-29670
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
5.4
Medium