Description
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
CVSS breakdown
CVSS 3.0
Availability
Low
User Interaction
None
Confidentiality
Low
Attack Vector
Network
Privileges Required
Low
Integrity
Low
Attack Complexity
Low
Scope
Unchanged
RC
Changed
E
Unchanged
RL
O
Affected products
- ibm / Engineering Lifecycle Optimization7.0.2 – 7.0.2
- ibm / Engineering Lifecycle Optimization7.0.1 – 7.0.1
- ibm / Engineering Lifecycle Optimization7.0 – 7.0
- ibm / Engineering Test Management7.0.0 – 7.0.0
- ibm / Engineering Test Management7.0.1 – 7.0.1
- ibm / Engineering Test Management7.0.2 – 7.0.2
- ibm / engineering_workflow_management7.0.2 – 7.0.2
- ibm / engineering_workflow_management7.0.1 – 7.0.1
- ibm / engineering_workflow_management7.0 – 7.0
- ibm / Rational Collaborative Lifecycle Management6.0.2 – 6.0.2
- ibm / Rational Collaborative Lifecycle Management6.0.6 – 6.0.6
- ibm / Rational Collaborative Lifecycle Management6.0.6.1 – 6.0.6.1
- ibm / Rational DOORS Next Generation7.0 – 7.0
- ibm / Rational DOORS Next Generation6.0.6.1 – 6.0.6.1
- ibm / Rational DOORS Next Generation6.0.6 – 6.0.6
- ibm / Rational DOORS Next Generation7.0.1 – 7.0.1
- ibm / Rational DOORS Next Generation7.0.2 – 7.0.2
- ibm / Rational Engineering Lifecycle Manager6.0.6 – 6.0.6
- ibm / Rational Engineering Lifecycle Manager6.0.6.1 – 6.0.6.1
- ibm / Rational Engineering Lifecycle Manager6.0.2 – 6.0.2
- ibm / Rational Quality Manager6.0.6.1 – 6.0.6.1
- ibm / Rational Quality Manager6.0.6 – 6.0.6
- ibm / Rational Team Concert6.0.6 – 6.0.6
- ibm / Rational Team Concert6.0.6.1 – 6.0.6.1