Skip to content
OpenAdvisories
Medium WID-SEC-2023-0177 1 CVE

IBM Business Automation Workflow: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jan 23, 2023 · Updated Jan 23, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow <= 19.0.0.3 Product: Business Automation Workflow <= 20.0.0.2 Product: Business Automation Workflow <= 21.0.3.1 Product: Business Automation Workflow <= 22.0.1 Product: Business Automation Workflow 20.0.0.1 Product: Business Automation Workflow 21.0.2 Product: Business Automation Workflow 22.0.2

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 1

  • High 7.5
    CVE-2022-43864

    IBM Business Automation Workflow information disclosure

    IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 23…

    IBM Business Monitor

Revision history

  1. #1

    Initiale Fassung

References