VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jul 28, 2021· Updated Jun 17, 2026

CVE-2020-4974

CVE-2020-4974

Description

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

34
  • IBM/Engineering Lifecycle Optimization Engineering Insights3 versions
    cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_lifecycle_optimization_-_engineering_insights:7.0:*:*:*:*:*:*:*
  • IBM/Engineering Requirements Quality Assistant On Premises
    cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:*:*:*:*:*:*:*:*
  • IBM/Engineering Test Management3 versions
    cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_test_management:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_test_management:7.0.2:*:*:*:*:*:*:*
  • IBM/Engineering Workflow Management5 versions
    cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.0
    • (no CPE)range: 7.0
  • IBM/Rational Collaborative Lifecycle Management4 versions
    cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.6:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.2
  • IBM/Rational Doors Next Generation6 versions
    cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:7.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.6
  • IBM/Rational Engineering Lifecycle Manager4 versions
    cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.2
  • IBM/Rational Quality Manager3 versions
    cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.6
  • IBM/Rational Team Concert3 versions
    cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*
    • (no CPE)range: 6.0.6
  • IBM/Jazz Foundationllm-fuzzy
  • IBM/Engineering Lifecycle Optimization Publishingcpe-rescue
    Range: 7.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.