medium4.3
CVE-2019-4045
IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features.
Impact
IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Business Automation Workflow | from 18.0.0.0 through 18.0.0.2 |
| Ibm | Business Process Manager | from 8.5.0.0 through 8.5.0.2 Versions 8.5.5.0, 8.5.6.0, 8.5.7.0, 8.6.0.0 |