Skip to content
OpenAdvisories
Medium WID-SEC-2023-3193 2 CVEs

IBM Business Automation Workflow: Mehrere Schwachstellen

Published Dec 20, 2023 · Updated Dec 20, 2023 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Business Automation Workflow 22.0.2 Product: Business Automation Workflow 23.0.1 Product: Business Automation Workflow 23.0.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 2

  • Medium 4.9
    CVE-2023-40691

    IBM Cloud Pak for Business Automation information disclosure

    IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator use…

    IBM Cloud Pak for Business Automation
  • Medium 4.9
    CVE-2023-46158

    IBM WebSphere Application Server session fixation

    IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.

    IBM WebSphere Application Server - Liberty

Revision history

  1. #1

    Initiale Fassung

References