CVE-2018-1885

Published: Apr 8, 2019Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.

Affected (16)

Products: Ibm: Business Automation Workflow, Business Process Manager, Business Process Manager Enterprise Service Bus, Websphere Enterprise Service Bus

Ibm

4 products

Business Automation Workflow

Business Process Manager

Business Process Manager Enterprise Service Bus

Websphere Enterprise Service Bus

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Automation Workflow	Version 18.0.0.0
Ibm Business Automation Workflow	Version 18.0.0.1
Ibm Business Automation Workflow	Version 18.0.0.2

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Process Manager	7.5.0.0 ≤ version ≤ 7.5.1.2
Ibm Business Process Manager	8.0.0.0 ≤ version ≤ 8.0.1.3
Ibm Business Process Manager	8.5.0.0 ≤ version ≤ 8.5.0.2
Ibm Business Process Manager	Version 8.5.5.0
Ibm Business Process Manager	Version 8.5.6.0
Ibm Business Process Manager	Version 8.5.6.0 cf1
Ibm Business Process Manager	Version 8.5.6.0 cf2
Ibm Business Process Manager	Version 8.5.7.0
Ibm Business Process Manager	Version 8.5.7.0 cf2017.06
Ibm Business Process Manager	Version 8.6.0.0
Ibm Business Process Manager	Version 8.6.0.0 cf2018.03
Ibm Business Process Manager Enterprise Service Bus	Version 8.6
Ibm Websphere Enterprise Service Bus	7.0.0.0 ≤ version ≤ 7.5.1.2