{"id":"CVE-2021-29701","aliases":["EUVD-2021-16175","GHSA-34vx-3926-gfg8"],"status":"published","title":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6...","description":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/AV:N/A:N/PR:L/I:N/UI:N/AC:L/C:L/RL:O/E:U/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00727,"percentile":0.54609,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-668"],"published":"2022-01-11T16:25:16Z","modified":"2026-06-17T03:48:10Z","products":[{"vendor":"ibm","product":"engineering workflow management"},{"vendor":"ibm","product":"engineering_workflow_management"},{"vendor":"ibm","product":"rational team concert"},{"vendor":"ibm","product":"rational_team_concert"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6539546","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/200657","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29701"},{"url":"https://github.com/advisories/GHSA-34vx-3926-gfg8"}],"sources":{"cve":[{"id":"CVE-2021-29701","description":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.","status":"published","published":"2022-01-11T16:25:16.923Z","modified":"2024-09-17T04:15:14.426Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/AV:N/A:N/PR:L/I:N/UI:N/AC:L/C:L/RL:O/E:U/RC:C","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:06.658806Z"}],"euvd":[{"id":"EUVD-2021-16175","description":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.","status":"published","published":"2022-01-11T16:25:16Z","modified":"2024-09-17T04:15:14Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/AV:N/A:N/PR:L/I:N/UI:N/AC:L/C:L/RL:O/E:U/RC:C","level":"medium"}],"updated_at":"2026-11-03T00:28:24.323088Z"}],"ghsa":[{"id":"GHSA-34vx-3926-gfg8","title":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6...","description":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.","status":"published","published":"2022-01-12T00:01:20Z","modified":"2023-08-08T15:31:31Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:54:44.111289Z"}],"nvd":[{"id":"CVE-2021-29701","description":"IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.","status":"published","published":"2022-01-11T17:15:07.567Z","modified":"2026-06-17T03:48:10.223Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:03.418194Z"}]}}