CVE-2021-29799: Medium severity ibm engineering requirements quality assistant vulnerability
IBM Engineering Requirements Quality Assistant could allow an authenticated user to obtain sensitive information due to improper client side validation.
Other sources
IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-29799?
CVE-2021-29799 is a vulnerability in IBM Engineering Requirements Quality Assistant On-Premises that allows an authenticated user to obtain sensitive information due to improper client-side validation.
How does CVE-2021-29799 affect IBM Engineering Requirements Quality Assistant On-Premises?
CVE-2021-29799 affects all versions of IBM Engineering Requirements Quality Assistant On-Premises.
What is the severity of CVE-2021-29799?
CVE-2021-29799 has a severity rating of medium (6.5 out of 10).
How can an authenticated user exploit CVE-2021-29799?
An authenticated user can exploit CVE-2021-29799 by bypassing client-side validation to obtain sensitive information.
Is there a fix available for CVE-2021-29799?
Yes, IBM has released a fix for CVE-2021-29799. Please refer to the IBM support page for more information.