← Back

CVE-2022-35279

nvd nist
Published: Nov 3, 2022Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."

Affected (21)

Ibm
1 product
Business Automation Workflow
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Business Automation Workflow
From 18.0.0.0 to 18.0.0.2
Business Automation Workflow
From 19.0.0.0 to 19.0.0.3
Business Automation Workflow
Version 20.0.0.1
Business Automation Workflow
Version 20.0.0.1
Business Automation Workflow
Version 20.0.0.2
Business Automation Workflow
Version 20.0.0.2
Business Automation Workflow
Version 21.0.1
Business Automation Workflow
Version 21.0.2
Business Automation Workflow
Version 21.0.2
Business Automation Workflow
Version 21.0.3
Business Automation Workflow
Version 21.0.3 if002
Business Automation Workflow
Version 21.0.3 if005
Business Automation Workflow
Version 21.0.3 if006
Business Automation Workflow
Version 21.0.3 if007
Business Automation Workflow
Version 21.0.3 if008
Business Automation Workflow
Version 21.0.3 if009
Business Automation Workflow
Version 21.0.3 if010
Business Automation Workflow
Version 21.0.3 if011
Business Automation Workflow
Version 22.0.1
Business Automation Workflow
Version 22.0.1
Business Automation Workflow
Version 22.0.1 if001

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.