Skip to content
OpenAdvisories
Low WID-SEC-2023-0042 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Cross-Site Request Forgery

Published Jan 9, 2023 · Updated Jan 9, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow <= 19.0.0.3 Product: Business Automation Workflow <= 20.0.0.2 Product: Business Automation Workflow <= 22.0.1 Product: Business Automation Workflow 18.0.0.0 Product: Business Automation Workflow 18.0.0.1 Product: Business Automation Workflow 18.0.0.2 Product: Business Automation Workflow 19.0.0.1 Product: Business Automation Workflow 19.0.0.2 Product: Business Automation Workflow 20.0.0.1 Product: Business Automation Workflow 21.0.2 Product: Business Automation Workflow 21.0.3 Product: Business Automation Workflow 22.0.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um einen Cross-Site Request Forgery Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • Medium 4.3
    CVE-2022-42435

    IBM Business Automation Workflow cross-site request forgery

    IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…

    IBM Business Automation Workflow

Revision history

  1. #1

    Initiale Fassung

References