Description
IBM Cloud Pak for Business Automation
24.0.0 and 24.0.1 through 24.0.1 IF001
Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Cloud Pak for Business Automation | 24.0.1 – ≤ 24.0.1 IF001, 24.0.0 – ≤ 24.0.0 IF004 | — |
Advisories 1
- WID-SEC-2025-0930 IBM Business Automation Workflow: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 4, 2025
References
- https://www.ibm.com/support/pages/node/7232429 vendor-advisory patch