Description
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6465127
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6467055
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
Scores
CVSS v3
4.3
EPSS
0.0085
EPSS Percentile
54.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
Status
published
Products (5)
ibm/business_automation_workflow
18.0.0.0
ibm/business_automation_workflow
19.0.0.0
ibm/business_automation_workflow
20.0.0.0
ibm/business_process_manager
8.5.0.0
ibm/business_process_manager
8.6.0.0
Published
Jun 28, 2021
Tracked Since
Feb 18, 2026