CVE-2021-20544

🗓️ 24 Jun 2022 16:15:37Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 69 Views

IBM Jazz Team Server 6.0.6 - 7.0.2 SSRF Vulnerabilit

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to induce the application to perform server-side HTTP and HTTPS requests to arbitrary domains.(CVE-2021-20544)	22 May 202410:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to induce the application to perform server-side HTTP and HTTPS requests to arbitrary domains.(CVE-2021-20544)	7 Jul 202206:37	–	ibm
Circl	CVE-2021-20544	24 Jun 202220:31	–	circl
CNNVD	IBM Jazz Team Server 代码问题漏洞	24 Jun 202200:00	–	cnnvd
CNVD	IBM Jazz Team Server Server-side Request Forgery Vulnerability (CNVD-2022-51652)	28 Jun 202200:00	–	cnvd
Cvelist	CVE-2021-20544	24 Jun 202216:15	–	cvelist
EUVD	EUVD-2021-7962	3 Oct 202520:07	–	euvd
NVD	CVE-2021-20544	24 Jun 202217:15	–	nvd
Prion	Server side request forgery (ssrf)	24 Jun 202217:15	–	prion

NVD

Vulners

Node

AND

ibm jazz_team_serverMatch6.0.6

ibm jazz_team_serverMatch6.0.6.1

ibm jazz_team_serverMatch7.0

ibm jazz_team_serverMatch7.0.1

ibm jazz_team_serverMatch7.0.2

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "product": "Jazz Team Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      }
    ]
  }
]