NetSight
IP …
medium5.3

CVE-2018-1885

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially crac…

Impact

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.

Affected products

VendorProductAffected versions
IbmBusiness Automation Workflow
Versions 18.0.0.0, 18.0.0.1, 18.0.0.2
IbmBusiness Process Manager
from 7.5.0.0 through 7.5.1.2
from 8.0.0.0 through 8.0.1.3
from 8.5.0.0 through 8.5.0.2
Versions 8.5.5.0, 8.5.6.0, 8.5.7.0
IbmBusiness Process Manager Enterprise Service Bus
Version 8.6
IbmWebsphere Enterprise Service Bus
from 7.0.0.0 through 7.5.1.2

Weakness classification

CWE-200

References