medium4.3
CVE-2021-29751
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive inform…
Impact
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Business Automation Workflow | Versions 18.0.0.0, 19.0.0.0, 20.0.0.0 |
| Ibm | Business Process Manager | Versions 8.5.0.0, 8.6.0.0 |
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
- https://www.ibm.com/support/pages/node/6465127
- https://www.ibm.com/support/pages/node/6467055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
- https://www.ibm.com/support/pages/node/6465127
- https://www.ibm.com/support/pages/node/6467055