CVE-2019-4045

MEDIUM

IBM Business Automation Workflow/Process Manager <18.0.0.3 - Info D...

Title source: llm
STIX 2.1

Description

IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/docview.wss?uid=ibm10870494
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/156241

Scores

CVSS v3 4.3
EPSS 0.0089
EPSS Percentile 55.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

Status published
Products (6)
ibm/business_automation_workflow 18.0.0.0 - 18.0.0.2
ibm/business_process_manager 8.5.5.0
ibm/business_process_manager 8.5.6.0 (3 CPE variants)
ibm/business_process_manager 8.5.7.0 (2 CPE variants)
ibm/business_process_manager 8.6.0.0 (3 CPE variants)
ibm/business_process_manager 8.5.0.0 - 8.5.0.2
Published Apr 08, 2019
Tracked Since Feb 18, 2026