CVE-2021-20355

CVE-2021-20355 is a sensitive information disclosure vulnerability in IBM Jazz Team Server versions 6.0.6 through 7.0.2, affecting deployments on Linux and Windows. The flaw stems from the failure to set the HTTPOnly flag on cookies, allowing a remote attacker to potentially obtain sensitive cookie data. This medium-severity vulnerability (CVSS 5.3) is easily exploitable over the network with low attack complexity and no user interaction required, though it only impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.