Cross-Site Scripting Vulnerability in IBM Jazz Team Server
CVE-2021-39059

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Jazz Team Server
Vendor
CVE Published:
11 May 2022

Summary

IBM Jazz Team Server versions 6.0.6 through 7.0.2 are susceptible to a cross-site scripting vulnerability. This weakness enables attackers to inject arbitrary JavaScript code into the web interface. Such an exploit can modify the intended functionality of the application, potentially leading to unauthorized exposure of user credentials within a trusted session. For additional information, see the references provided by IBM.

Affected Version(s)

Jazz Team Server 6.0.6

Jazz Team Server 6.0.6.1

Jazz Team Server 7.0

References

https://www.ibm.com/support/pages/node/6584347
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/214619
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.