CVE-2021-38877

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/208405 · VDB Entry
• ibm.com/support/pages/node/6491521 · Patch

jazz for service management 的其他漏洞

• CVE-2025-36249中危 5.3IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attac…
• CVE-2025-36011中危 4.3IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attac…
• CVE-2024-52892中危 6.1IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated a…
• CVE-2024-47106高危 7.5IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access re…
• CVE-2023-46186高危 7.5IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to …