CVE-2017-1324

概要

参考情報

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/101062 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/125975 · VDB Entry

rational engineering lifecycle manager のその他の脆弱性

• CVE-2021-29844高 8.8IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthor…
• CVE-2021-29786中 6.5IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.
• CVE-2021-29774高 7.5IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: …
• CVE-2021-29713中 5.4IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …
• CVE-2021-29673中 5.4IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …