5.9
Moyenne
CVE-2020-4965 IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to…
Description
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rational DOORS Next Generation 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| Rational DOORS Next Generation 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Engineering Test Management 7.0 | 7.0.0 → 7.0.2 | Pas de correctif indiqué |
| Rational Collaborative Lifecycle Management 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Rational Engineering Lifecycle Manager 7.0 | 7.0 → 7.0.1 | Pas de correctif indiqué |
| Rational Engineering Lifecycle Manager 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Rational Quality Manager 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Rational Team Concert 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Rational Rhapsody Model Manager 7.0 | 7.0 → 7.0.1 | Pas de correctif indiqué |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rational Rhapsody Model Manager 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Engineering Workflow Management 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| Engineering Lifecycle Optimization 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
Autres CVE de Rational DOORS Next Generation
Les 91 CVE de Rational DOORS Next Generation →
CVE-2021-29844
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
5.4
Moyenne
CVE-2021-29786
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user
6.5
Moyenne
CVE-2021-29774
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain…
7.5
Élevée
CVE-2021-29713
IBM Jazz Team Server products are vulnerable to cross-site scripting
5.4
Moyenne