Skip to content
Sign in
5.4 Medium

CVE-2021-29844 IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)

Description

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected products and versions

Product Affected versions Fixed in
Engineering Workflow Management 7.0 No fix stated
Rational DOORS Next Generation 7.0 7.0 → 7.0.2 No fix stated
Rational DOORS Next Generation 6.0 6.0.6 → 6.0.6.1 No fix stated
Rational Team Concert 6.0 6.0.2 → 6.0.6.1 No fix stated
Rational Engineering Lifecycle Manager 7.0 7.0 → 7.0.2 No fix stated
Engineering Lifecycle Optimization 7.0 7.0.1 → 7.0.2 No fix stated
Rational Collaborative Lifecycle Management 6.0 6.0.6 → 6.0.6.1 No fix stated

Other CVEs of Engineering Workflow Management

The 48 CVEs of Engineering Workflow Management →
CVE-2024-51454 IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1… 6.5 Medium CVE-2025-33128 IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is… 5.4 Medium CVE-2024-28793 IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting 4.9 Medium CVE-2020-4989 IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an… 4.3 Medium
Track this CVE