NetSight
medium4.3

CVE-2022-35279

"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sen…

Impact

"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."

Affected products

VendorProductAffected versions
IbmBusiness Automation Workflow
from 18.0.0.0 through 18.0.0.2
from 19.0.0.0 through 19.0.0.3
Versions 20.0.0.1, 20.0.0.2, 21.0.1, 21.0.2

Weakness classification

References