← Back

CVE-2020-4794

nvd nist
Published: Dec 21, 2020Modified: Nov 21, 2024

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Exploitability: 2.8 / Impact: 2.5
Source: NVD

Description

IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.

Affected (51)

3 products
Automation Workstream Services
Business Process Manager
Business Automation Workflow
Configuration A
41 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 19.0.3
Version 20.0.1
Version 20.0.2
Ibm
Version 8.0.0.0
Version 8.0.0.0
Version 8.0.1.0
Version 8.0.1.0
Version 8.0.1.1
Version 8.0.1.1
Version 8.0.1.2
Version 8.0.1.2
Version 8.0.1.3
Version 8.0.1.3
Version 8.5.0.0
Version 8.5.0.0
Version 8.5.0.1
Version 8.5.0.1
Version 8.5.0.2
Version 8.5.0.2
Version 8.5.5.0
Version 8.5.5.0
Version 8.5.6.0
Version 8.5.6.0
Version 8.5.6.1
Version 8.5.6.1
Version 8.5.6.2
Version 8.5.6.2
Version 8.5.7.0
Version 8.5.7.0
Version 8.5.7.0 cf201606
Version 8.5.7.0 cf201606
Version 8.5.7.0 cf201609
Version 8.5.7.0 cf201609
Version 8.5.7.0 cf201612
Version 8.5.7.0 cf201612
Version 8.5.7.0 cf201703
Version 8.5.7.0 cf201703
Version 8.5.7.0 cf201706
Version 8.5.7.0 cf201706
Version 8.6
Version 8.6
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Version 18.0.0.0
Version 18.0.0.1
Version 18.0.0.2
Version 19.0.0.0
Version 19.0.0.1
Version 19.0.0.2
Version 19.0.0.3
Version 20.0.0.0
Version 20.0.0.1
Version 20.0.2.0

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.