Server-Side Request Forgery Vulnerability in IBM Jazz Team Server

CVE-2021-20544

What is CVE-2021-20544?

IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 are susceptible to a server-side request forgery vulnerability. This issue allows authenticated attackers to send unauthorized requests from the server, which may lead to unauthorized network enumeration and pave the way for further exploitation. It is crucial for users to apply the necessary patches to mitigate this security risk.

References