CVE-2021-29774: High severity ibm engineering lifecycle optimization vulnerability

Q: What is the severity of CVE-2021-29774?

The severity of CVE-2021-29774 is high.

Q: Which products are affected by CVE-2021-29774?

IBM CLM, IBM ELM, IBM Engineering Requirements Quality Assistant, IBM Engineering Requirements Quality Assistant On-Premises, IBM EWM, IBM RTC, IBM Engineering Systems Design Rhapsody, IBM DOORS Next, IBM RDNG, IBM Engineering Lifecycle Optimization, IBM Engineering Workflow Management, and IBM Rational Collaborative Lifecycle Management are affected by CVE-2021-29774.

Q: What is IBM X-Force ID for CVE-2021-29774?

The IBM X-Force ID for CVE-2021-29774 is 203025.

Q: What is the description of CVE-2021-29774?

CVE-2021-29774 is a vulnerability that could allow an authenticated user to obtain elevated privileges under certain configurations in IBM Jazz Team Server products.

Q: Where can I find more information about CVE-2021-29774?

You can find more information about CVE-2021-29774 on the IBM X-Force ID page: https://exchange.xforce.ibmcloud.com/vulnerabilities/203025.

Published Oct 25, 2021

Updated

IBM Engineering Requirements Quality Assistant could allow an authenticated user to obtain elevated privileges under certain configurations.

Other sources

IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.

Affected Software

41 affected components

IBM Engineering Lifecycle Optimization=7.0.1

IBM Engineering Lifecycle Optimization=7.0.2

IBM Engineering Workflow Management (EWM)=6.0.6

IBM Engineering Workflow Management (EWM)=6.0.6.1

IBM Engineering Workflow Management (EWM)=7.0

IBM Engineering Workflow Management (EWM)=7.0.1

IBM Engineering Workflow Management (EWM)=7.0.2

IBM Rational Collaborative Lifecycle Management=6.0.6

IBM Rational Collaborative Lifecycle Management=6.0.6.1

IBM Rational DOORS Next Generation=6.0.2

IBM Rational DOORS Next Generation=6.0.6

IBM Rational DOORS Next Generation=6.0.6.1

IBM Rational DOORS Next Generation=7.0

IBM Rational Engineering Lifecycle Manager=6.0.6

IBM Rational Engineering Lifecycle Manager=6.0.6.1

IBM Rational Engineering Lifecycle Manager=7.0

IBM Rational Engineering Lifecycle Manager=7.0.1

IBM Rational Engineering Lifecycle Manager=7.0.2

IBM Rational Team Concert=6.0.2

IBM Rational Team Concert=6.0.6

IBM Rational Team Concert=6.0.6.1

IBM Rational Team Concert=7.0

IBM CLM<=6.0.6.1

IBM CLM<=6.0.6

IBM ELM<=7.0.2

IBM ELM<=7.0

IBM ELM<=7.0.1

IBM Engineering Requirements Quality Assistant<=1.0

IBM Engineering Requirements Quality Assistant On-Premises<=All

IBM EWM<=7.0.2

IBM EWM<=7.0.1

IBM RTC<=6.0.2

IBM RTC<=6.0.6.1

IBM EWM<=7.0

IBM RTC<=6.0.6

IBM Engineering Systems Design Rhapsody<=All

IBM DOORS Next<=7.0.2

IBM DOORS Next<=7.0

IBM DOORS Next<=7.0.1

IBM RDNG<=6.0.6.1

IBM RDNG<=6.0.6

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6508583

Event History

Oct 25, 2021

CVE Published

via IBM·12:00 AM

Oct 27, 2021

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6508583

Frequently Asked Questions

What is the severity of CVE-2021-29774?

The severity of CVE-2021-29774 is high.

Which products are affected by CVE-2021-29774?