Unrated severityNVD Advisory· Published Jul 28, 2021· Updated Sep 17, 2024

CVE-2020-4974

Description

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.

Affected products

IBM/Engineering Lifecycle Optimization Publishingcpe-rescue
Range: 7.0
IBM/Engineering Workflow Managementcpe-rescue2 versions
7.0.0+ 1 more
- (no CPE)range: 7.0.0
- (no CPE)range: 7.0
IBM/Rational Collaborative Lifecycle Managementcpe-rescue
Range: 6.0.2
IBM/Rational Doors Next Generationcpe-rescue
Range: 6.0.6
IBM/Rational Engineering Lifecycle Managercpe-rescue
Range: 6.0.2
IBM/Rational Quality Managercpe-rescue
Range: 6.0.6
IBM/Rational Team Concertcpe-rescue
Range: 6.0.6

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

exchange.xforce.ibmcloud.com/vulnerabilities/192434mitrevdb-entryx_refsource_XF
www.ibm.com/support/pages/node/6475919mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000