CVE-2021-29844

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-27 · updated 2026-06-17
Weakness: CWE-918

Description

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected products

IBM Engineering Lifecycle Optimization: 6.0.6, 6.0.6.1, 7.0
IBM Engineering Requirements Quality Assistant: all versions
IBM Engineering Workflow Management: 7.0, 7.0.1, 7.0.2
IBM Rational DOORS Next Generation: 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2
IBM Rational Engineering Lifecycle Manager: 7.0, 7.0.1, 7.0.2
IBM Corporation Rational Rhapsody Design Manager: all versions
IBM Rational Team Concert: 6.0.2, 6.0.6, 6.0.6.1

References

Get alerted when CVE-2021-29844 or the next vulnerability affects your stack