Skip to content
OpenAdvisories
Medium WID-SEC-2025-2534 3 CVEs

IBM Business Automation Workflow: Mehrere Schwachstellen

Published Nov 9, 2025 · Updated Nov 26, 2025 · Revision 2 · de-DE

Vendor: IBM Product: App Connect Enterprise Product: Business Automation Workflow Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.

Product

IBM Business Automation Workflow ist eine Lösung zur Automatisierung von Arbeitsabläufen.

Vulnerabilities 3

  • Medium 5.3
    CVE-2025-50181

    urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

    urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are …

    urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 5.3
    CVE-2025-50182

    urllib3 does not control redirects in browsers and Node.js

    urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling…

    urllib3 urllib3 katib-earlystopping kubeflow-pipelines-apiserver Debian Wolfi PyPI
  • Medium 5.3
    CVE-2025-54121

    Starlette has possible denial-of-service vector when parsing large files in multipart forms

    Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files (greater than the default max spool si…

    encode starlette open-webui airflow-3 Debian Ubuntu Wolfi PyPI

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References