Server-Side Request Forgery Vulnerability in IBM Jazz Team Server
CVE-2021-20544

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Jazz Team Server
Vendor
CVE Published:
24 June 2022

Summary

IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 are susceptible to a server-side request forgery vulnerability. This issue allows authenticated attackers to send unauthorized requests from the server, which may lead to unauthorized network enumeration and pave the way for further exploitation. It is crucial for users to apply the necessary patches to mitigate this security risk.

Affected Version(s)

Jazz Team Server 6.0.6

Jazz Team Server 6.0.6.1

Jazz Team Server 7.0

References

https://www.ibm.com/support/pages/node/6597513
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/198931
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.