First published: Fri Jun 17 2022(Updated: )
IBM Jazz Foundation could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Jazz Team Server | =6.0.6 | |
IBM Jazz Team Server | =6.0.6.1 | |
IBM Jazz Team Server | =7.0 | |
IBM Jazz Team Server | =7.0.1 | |
IBM Jazz Team Server | =7.0.2 | |
Linux Linux kernel | ||
Microsoft Windows | ||
IBM Jazz Team Server | <=6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2021-29865 is rated as medium with a CVSS score of 5.4.
By persuading a victim to visit a malicious website, a remote attacker could exploit this vulnerability to hijack the victim's click actions.
Yes, IBM Jazz Team Server 6.0.6 is vulnerable to CVE-2021-29865.
Ensure to update IBM Jazz Team Server to a version that has a security patch for CVE-2021-29865 to mitigate the risk.