← Back

CVE-2021-29753

nvd nist
Published: Nov 5, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected (6)

Ibm
2 products
Business Automation Workflow
Business Process Manager
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Business Automation Workflow
Version 18.0.0.0
Business Automation Workflow
Version 19.0.0.0
Business Automation Workflow
Version 20.0.0.0
Business Automation Workflow
Version 21.0.0.0
Ibm
Business Process Manager
Version 8.5.0.0
Business Process Manager
Version 8.6.0.0

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.