Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-20371 EUVD-2021-7789GHSA-7732-95pg-6pp9

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is ret…

Published Jun 2, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.

Affected products

VendorProductAffectedFixed
IBM Rational Collaborative Lifecycle Management 6.0.6, 6.0.6.1 —
IBM Rational Engineering Lifecycle Manager 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2 —
IBM Engineering Lifecycle Optimization 7.0, 7.0.1, 7.0.2 —
IBM Rational DOORS Next Generation 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2 —
IBM Rational Quality Manager 6.0.6, 6.0.6.1 —
IBM Rational Rhapsody Model Manager 6.0.6, 6.0.6.1, 7.0 —
IBM Engineering Test Management 7.0.0, 7.0.1 —

References