CVE-2020-4974
CVE-2020-4974
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Jul 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
CVSS:3.0/A:L/UI:N/C:L/AV:N/PR:L/I:L/AC:L/S:U/RC:C/E:U/RL:O
Affected products
IBM · Engineering Lifecycle OptimizationIBM · Engineering Test ManagementIBM · Engineering Workflow ManagementIBM · Rational Collaborative Lifecycle ManagementIBM · Rational DOORS Next GenerationIBM · Rational Engineering Lifecycle ManagerIBM · Rational Quality ManagerIBM · Rational Team Concert