Information Disclosure in IBM Engineering Workflow Management and Rational Team Concert

Information Disclosure in IBM Engineering Workflow Management and Rational Team Concert

CVE-2021-29701 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.

Learn more about our Web Application Penetration Testing UK.