First published: Fri Jun 17 2022(Updated: )
IBM Jazz Foundation allows web pages to be stored locally which can be read by another user on the system.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Jazz Team Server | <=6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2 | |
IBM Jazz Team Server | =6.0.6 | |
IBM Jazz Team Server | =6.0.6.1 | |
IBM Jazz Team Server | =7.0 | |
IBM Jazz Team Server | =7.0.1 | |
IBM Jazz Team Server | =7.0.2 | |
Linux Kernel | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-20551 is categorized as a moderate severity vulnerability.
To fix CVE-2021-20551, upgrade to a version of IBM Jazz Team Server that is not affected, such as version 7.0.3 or later.
CVE-2021-20551 affects IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2.
CVE-2021-20551 allows unauthorized users to read locally stored web pages of other users on the system.
CVE-2021-20551 specifically affects the IBM Jazz Team Server software, and does not directly impact the underlying operating systems like Linux or Windows.