CVE-2018-1588

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/143501 · VDB Entry
• ibm.com/support/docview.wss · Vendor Advisory

rational engineering lifecycle manager のその他の脆弱性

• CVE-2021-29844高 8.8IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthor…
• CVE-2021-29786中 6.5IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.
• CVE-2021-29774高 7.5IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: …
• CVE-2021-29713中 5.4IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …
• CVE-2021-29673中 5.4IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …