Vulnerability Name: | CVE-2021-29701 (CCN-200657) | ||||||||||||
Assigned: | 2021-03-31 | ||||||||||||
Published: | 2022-01-10 | ||||||||||||
Updated: | 2022-01-20 | ||||||||||||
Summary: | IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657. | ||||||||||||
CVSS v3 Severity: | 4.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) 3.8 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
3.8 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 4.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N)
| ||||||||||||
Vulnerability Type: | CWE-668 | ||||||||||||
Vulnerability Consequences: | Obtain Information | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2021-29701 Source: XF Type: UNKNOWN ibm-engineering-cve202129701-info-disc(200657) Source: XF Type: VDB Entry, Vendor Advisory ibm-engineering-cve202129701-info-disc (200657) Source: CCN Type: IBM Security Bulletin 6539546 (Engineering Workflow Management) Vulnerability which affects Rational Team Concert (RTC) and IBM Engineering Workflow Management (EWM) Source: CONFIRM Type: Vendor Advisory https://www.ibm.com/support/pages/node/6539546 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||||||
BACK |