Sensitive Information Exposure in IBM Jazz Team Server

CVE-2021-20355

What is CVE-2021-20355?

IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 contain a vulnerability that may allow a remote attacker to access sensitive information. This issue arises due to the absence of the HTTPOnly flag on cookies, which can be exploited to retrieve confidential data. Exploitation of this vulnerability highlights the importance of proper cookie management and security configurations in web applications.

References