PT-2022-9928 · Ibm · Ibm Rational Team Concert+1

Published 2022-01-11 · Updated 2023-08-08 · CVE-2021-29701

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Engineering Workflow Management versions 7.0 through 7.0.2 IBM Rational Team Concert versions 6.0.6 through 6.0.6.1

Description The issue allows an authenticated attacker to obtain sensitive information from build definitions, which could aid in further attacks against the system.

Recommendations For IBM Engineering Workflow Management versions 7.0 through 7.0.2, update to a version that includes the fix for this issue. For IBM Rational Team Concert versions 6.0.6 through 6.0.6.1, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to build definitions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2021-29701

Affected Products

Ibm Engineering Workflow Management

Ibm Rational Team Concert

References · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/200657 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29701 · Vendor Advisory
• https://ibm.com/support/pages/node/6539546 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29701 · Security Note
• https://t.me/cibsecurity/35258 · Telegram Post
• https://t.me/cvenotify/25720 · Telegram Post