Skip to content
OpenAdvisories
Medium · 4.9 CVE-2021-39046 EUVD-2021-25483GHSA-r6rq-vwqp-j4p3

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain c…

Published Mar 18, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow Product: Business Process Manager

Description

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346.

Affected products

VendorProductAffectedFixed
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3 —
IBM Business Process Manager 8.5, 8.6 —

References