IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/201779 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6465127 | Patch Vendor Advisory |
| https://www.ibm.com/support/pages/node/6467055 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
01 Jul 2021, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://www.ibm.com/support/pages/node/6467055 - Patch, Vendor Advisory | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/201779 - VDB Entry, Vendor Advisory | |
| References | (CONFIRM) https://www.ibm.com/support/pages/node/6465127 - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 4.3 |
| CWE | CWE-863 | |
| CPE | cpe:2.3:a:ibm:business_automation_workflow:20.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:business_automation_workflow:19.0.0.0:*:*:*:*:*:*:* |
28 Jun 2021, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-06-28 16:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-29751
Mitre link : CVE-2021-29751
CVE.ORG link : CVE-2021-29751
JSON object : View
Products Affected
ibm
- business_automation_workflow
- business_process_manager
CWE