Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-4532 EUVD-2020-25779GHSA-jf7x-r4m4-rqc9

IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could…

Published Jun 17, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182716.

Affected products

VendorProductAffectedFixed
IBM Business Process Manager Express 8.6, 8.5.7.CF201706, 8.5.7.CF201703, 8.5.7.CF201612, 8.5.7.CF201609, 8.5.7.CF201606, 8.5.7, 8.5.6.2, 8.5.6.1, 8.5.6, 8.5.5 —

References