Skip to content
OpenAdvisories
Low · 3.1 CVE-2021-29751 EUVD-2021-16225GHSA-5w9g-vrj4-xwgh

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obt…

Published Jun 28, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow Product: Business Process Manager Product: Cloud Pak for Automation

Description

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

Affected products

VendorProductAffectedFixed
IBM Business Process Manager 8.5, 8.6 —
IBM Business Automation Workflow 18.0, 19.0, 20.0 —
IBM Cloud Pak for Automation 20.0.3.IF002, 21.0.1 —

References