Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-4490 EUVD-2020-25737GHSA-9cmc-3866-78p4

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass secu…

Published May 29, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow Product: Business Process Manager Advanced

Description

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989

Affected products

VendorProductAffectedFixed
IBM Business Process Manager Advanced 8.0, 8.0.1, 8.0.1.1, 8.0.1.2, 8.5, 8.5.0.1, 8.5.5, 8.0.1.3, 8.5.6, 8.5.0.2, 8.5.7, 8.5.7.CF201609, 8.5.6.1, 8.5.6.2, 8.5.7.CF201606, 8.5.7.CF201612, 8.5.7.CF201703, 8.5.7.CF201706, 8.6 —
IBM Business Automation Workflow 18.0.0.0, 19.0.0.0 —

References