CVE:CVE-2021-29673
CNNVD:CNNVD-202110-2003
IBM Jazz Team Server是美国IBM公司的一个应用服务器。提供了基础服务，这些服务使一组工具可以作为单个逻辑服务器一起工作，并且包括提供工具特定功能的任意数量的Jazz Team Server Extensions。
IBM Jazz Team Server 中存在跨站脚本漏洞，该漏洞源于产品未对用户输入数据做有效验证。攻击者可通过该漏洞导致凭证泄漏。
solution:Upgrade ibm engineering_lifecycle_optimization to a higher version than 7.0.1,7.0.2,and avoid the version 7.0.1,7.0.2; Upgrade ibm engineering_workflow_management to a higher version than 7.0.1,7.0.2,and avoid the version 7.0.1,7.0.2; Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 6.0.1,6.0.6,and avoid the version 6.0.1,6.0.6; Upgrade ibm rational_doors_next_generation to a higher version than 7.0,7.0.1,7.0.2,and avoid the version 7.0,7.0.1,7.0.2; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade ibm rational_team_concert to a higher version than 6.0.1,6.0.6,7.0,7.0.1,7.0.2,and avoid the version 6.0.1,6.0.6,7.0,7.0.1,7.0.2
solution:Upgrade invoiceplane invoiceplane to a higher version than 1.5.11,and avoid the version 1.5.11