6.3
Moyenne
CVE-2020-4974 IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF)
Description
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Engineering Test Management 7.0 | 7.0.0 → 7.0.2 | Pas de correctif indiqué |
| Rational Team Concert 6.0 | 6.0.6 → 6.0.6.1 | Pas de correctif indiqué |
| Rational Quality Manager 6.0 | 6.0.6 → 6.0.6.1 | Pas de correctif indiqué |
| Rational DOORS Next Generation 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| Rational DOORS Next Generation 6.0 | 6.0.6 → 6.0.6.1 | Pas de correctif indiqué |
| Rational Collaborative Lifecycle Management 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
| Engineering Workflow Management 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| Engineering Lifecycle Optimization 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| Rational Engineering Lifecycle Manager 6.0 | 6.0.2 → 6.0.6.1 | Pas de correctif indiqué |
Autres CVE de Engineering Test Management
Les 39 CVE de Engineering Test Management →
CVE-2023-43054
IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting
6.4
Moyenne
CVE-2021-38934
IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2020-5004
IBM Jazz Foundation products are vulnerable to cross-site scripting
5.4
Moyenne
CVE-2021-29670
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
5.4
Moyenne