CVE-2020-4446

Published: May 6, 2020Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insufficient authorization checks. IBM X-Force ID: 181126.

Affected (5)

Products: Ibm: Business Automation Workflow, Business Process Manager

Ibm

2 products

Business Automation Workflow

Business Process Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Automation Workflow	From 18.0.0.0 to 18.0.0.2
Ibm Business Automation Workflow	From 19.0.0.1 to 19.0.0.3
Ibm Business Process Manager	From 8.0.0.0 to 8.0.1.3
Ibm Business Process Manager	From 8.5.0.0 to 8.5.7.0
Ibm Business Process Manager	Version 8.6.0.0