Cross-Site Request Forgery Vulnerability in IBM Jazz for Service Management
CVE-2021-29816

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Jazz For Service Management
Vendor
CVE Published:
23 September 2021

What is CVE-2021-29816?

IBM Jazz for Service Management versions 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI are susceptible to a cross-site request forgery vulnerability. This security flaw may allow attackers to carry out unauthorized actions on behalf of a trusted user, leading to potential exploitation of sensitive data or user privileges. This vulnerability emphasizes the need for robust security measures in web applications to protect against CSRF attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Jazz for Service Management 1.1.3.10

References

https://www.ibm.com/support/pages/node/6491535
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/204341
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.