CVE-2019-4425

Published: Aug 20, 2019Modified: Nov 21, 2024

5.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.1 / Impact: 3.6

Source: NVD

Description

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecting users. IBM X-Force ID: 162771.

Affected (16)

Products: Ibm: Business Automation Workflow, Business Process Manager

Ibm

2 products

Business Automation Workflow

Business Process Manager

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Automation Workflow	From 18.0.0.0 to 19.0.0.2
Ibm Business Process Manager	From 8.0.0.0 to 8.0.1.3
Ibm Business Process Manager	From 8.5.0.0 to 8.5.0.2
Ibm Business Process Manager	Version 8.5.5.0
Ibm Business Process Manager	Version 8.5.6.0
Ibm Business Process Manager	Version 8.5.6.0 cf01
Ibm Business Process Manager	Version 8.5.6.0 cf02
Ibm Business Process Manager	Version 8.5.7.0
Ibm Business Process Manager	Version 8.5.7.0 cf2016.06
Ibm Business Process Manager	Version 8.5.7.0 cf2016.09
Ibm Business Process Manager	Version 8.5.7.0 cf2016.12
Ibm Business Process Manager	Version 8.5.7.0 cf2017.03
Ibm Business Process Manager	Version 8.5.7.0 cf2017.06
Ibm Business Process Manager	Version 8.6.0.0
Ibm Business Process Manager	Version 8.6.0.0 cf2017.12
Ibm Business Process Manager	Version 8.6.0.0 cf2018.03

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/162771

Source: psirt@us.ibm.com

Broken LinkVDB Entry

https://www.ibm.com/support/docview.wss?uid=ibm10959261

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/162771

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVDB Entry

https://www.ibm.com/support/docview.wss?uid=ibm10959261

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.