IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LIBM Engineering Lifecycle Optimization Engineering Insights
APPIbm7.07.0.17.0.2IBM Engineering Requirements Quality Assistant On Premises
APPIbmwszystkie wersjeIBM Engineering Test Management
APPIbm7.0.07.0.17.0.2IBM Engineering Workflow Management
APPIbm7.07.0.17.0.2IBM Rational Collaborative Lifecycle Management
APPIbm6.0.26.0.66.0.6.1IBM Rational Doors Next Generation
APPIbm6.0.66.0.6.17.07.0.17.0.2IBM Rational Engineering Lifecycle Manager
APPIbm6.0.26.0.66.0.6.1IBM Rational Quality Manager
APPIbm6.0.66.0.6.1IBM Rational Team Concert
APPIbm6.0.66.0.6.1
Related vulnerabilities
IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External...
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authentic...
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain co...
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions...
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker t...