Server-Side Request Forgery Vulnerability in IBM Jazz Team Server
CVE-2021-20421

5.4MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
24 June 2022

Summary

IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 are susceptible to a server-side request forgery (SSRF) vulnerability. An authenticated attacker may exploit this weakness to send unauthorized requests from the server, potentially leading to network enumeration or enabling additional malicious activities. It's critical for users of affected versions to implement necessary patches and adopt best practices to secure their environments.

Affected Version(s)

Jazz Team Server 6.0.6

Jazz Team Server 6.0.6.1

Jazz Team Server 7.0

References

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.