Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-4446 EUVD-2020-25693GHSA-qf8r-xr22-fxr5

IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass s…

Published May 6, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow Product: Business Process Manager Standard

Description

IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insufficient authorization checks. IBM X-Force ID: 181126.

Affected products

VendorProductAffectedFixed
IBM Business Process Manager Standard 8.5.5, 8.5.7.CF201706, 8.5.7.CF201703, 8.5.7.CF201612, 8.5.7.CF201609, 8.5.7.CF201606, 8.5.7, 8.5.6.2, 8.5.6.1, 8.5.6, 8.6, 8.5.0.2, 8.5.0.1, 8.5, 8.0.1.3, 8.0.1.2, 8.0.1.1, 8.0.1, 8.0 —
IBM Business Automation Workflow 18.0.0.0, 19.0.0.1 —

References