Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-21252

Summary

There is a vulnerability CVE-2021-21252 which affects IBM Engineering Workflow Management (EWM).

Vulnerability Details

CVEID:CVE-2021-21252
**DESCRIPTION:**jQuery Validation Plugin is vulnerable to a denial of service, caused by a regular expression denial of service (ReDoS) flaw when validating forms. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/194982 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

Upgrade to version 7.0.2 iFix020 or later

IBM Engineering Lifecycle Management 7.0.2 iFix020

IBM Engineering Workflow Management 7.0.2 iFix020

Upgrade to version 7.0.1 iFix020 or later

IBM Engineering Lifecycle Management 7.0.1 iFix020

IBM Engineering Workflow Management 7.0.1 iFix020

Workarounds and Mitigations

None