Server-side request forgery in IBM Engineering Workflow Management
Priority LOW 39CWE-918Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Why it matters now
EPSS 0.00592 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| IBM | Engineering Workflow Management | 7.0 | — | No fix listed | CNA |
| IBM | Rational DOORS Next Generation | 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 | — | No fix listed | CNA |
| IBM | Rational Team Concert | 6.0.2; 6.0.6; 6.0.6.1 | — | No fix listed | CNA |
| IBM | Rational Engineering Lifecycle Manager | 7.0; 7.0.1; 7.0.2 | — | No fix listed | CNA |
| IBM | Engineering Lifecycle Optimization | 7.0.1; 7.0.2 | — | No fix listed | CNA |
| IBM | Rational Collaborative Lifecycle Management | 6.0.6; 6.0.6.1 | — | No fix listed | CNA |
- Engineering Workflow Management VendorIBM Affected 7.0 Fixed in — No fix listed CNA
- Rational DOORS Next Generation VendorIBM Affected 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 Fixed in — No fix listed CNA
- Rational Team Concert VendorIBM Affected 6.0.2; 6.0.6; 6.0.6.1 Fixed in — No fix listed CNA
- Rational Engineering Lifecycle Manager VendorIBM Affected 7.0; 7.0.1; 7.0.2 Fixed in — No fix listed CNA
- Engineering Lifecycle Optimization VendorIBM Affected 7.0.1; 7.0.2 Fixed in — No fix listed CNA
- Rational Collaborative Lifecycle Management VendorIBM Affected 6.0.6; 6.0.6.1 Fixed in — No fix listed CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ibm:engineering_lifecycle_optimization:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | IBM |
| cpe:2.3:a:ibm:engineering_lifecycle_optimization:6.0.6.1:*:*:*:*:*:*:* | 6.0.6.1 | Vulnerable | IBM |
| cpe:2.3:a:ibm:engineering_lifecycle_optimization:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | IBM |
| cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | IBM |
| cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | IBM |
| cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:* | 7.0.1 | Vulnerable | IBM |
| cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:* | 6.0.6.1 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_doors_next_generation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | IBM |
- cpe:2.3:a:ibm:engineering_lifecycle_optimization:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·IBM
- cpe:2.3:a:ibm:engineering_lifecycle_optimization:6.0.6.1:*:*:*:*:*:*:* Versions 6.0.6.1 Vulnerable ·IBM
- cpe:2.3:a:ibm:engineering_lifecycle_optimization:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·IBM
- cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·IBM
- cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·IBM
- cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·IBM
- cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:* Versions 6.0.6.1 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_doors_next_generation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·IBM
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ibm:rational_doors_next_generation:7.0.1:*:*:*:*:*:*:* | 7.0.1 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_doors_next_generation:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:7.0.1:*:*:*:*:*:*:* | 7.0.1 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_rhapsody_design_manager:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:* | 6.0.2 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | IBM |
| cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:* | 6.0.6.1 | Vulnerable | IBM |
- cpe:2.3:a:ibm:rational_doors_next_generation:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_doors_next_generation:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·IBM
- cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:* Versions 6.0.6.1 Vulnerable ·IBM
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-29844
- 2026-10-03 Alias added: GHSA-89h6-69jq-v92c
References
More IBM Engineering Lifecycle Optimization vulnerabilities
- TI-2023-24203 IBM Engineering Lifecycle Optimization information disclosure CVSS 3.1HIGH 7.5
- TI-2023-24199 IBM Engineering Lifecycle Optimization - Publishing session fixation CVSS 3.1HIGH 8.8
- TI-2021-10449 IBM Jazz Team Server products could allow an authenticated user to obtain elevated… CVSS 3.1HIGH 7.5
- TI-2021-10458 Cleartext storage of sensitive information in IBM Engineering Lifecycle Optimization CVSS 3.1MEDIUM 6.5
- TI-2024-35392 IBM Engineering Lifecycle Optimization - Publishing cross-site scripting CVSS 3.1MEDIUM 6.1
- TI-2023-24202 IBM Engineering Lifecycle Optimization HTTP header injection CVSS 3.1MEDIUM 6.1
Sources
- CVE-2021-29844 · CVE Program
- CVE-2021-29844 · NVD
- FIRST EPSS
- GHSA-89h6-69jq-v92c · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences