Description (CNA)
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Business Process Manager | affected 8.5; affected 8.6 |
| IBM / Business Automation Workflow | affected 18.0; affected 19.0; affected 20.0 |
| IBM / Cloud Pak for Automation | affected 20.0.3.IF002; affected 21.0.1 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6465127
- https://www.ibm.com/support/pages/node/6467055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
ADP enrichment
No English description supplied.