Information Disclosure Vulnerability in IBM Business Automation Workflow
CVE-2020-4900

5.1MEDIUM

Key Information:

Vendor
IBM
Status
Business Automation Workflow
Vendor
CVE Published:
30 November 2020

Summary

An information disclosure vulnerability exists in IBM Business Automation Workflow 19.0.0.3 due to inadequate protection of sensitive information stored in log files. Local users can potentially read this information, leading to unauthorized access to sensitive data. For further details, refer to IBM's support page and the X-Force database entry.

Affected Version(s)

Business Automation Workflow 19.0.0.3

References

https://www.ibm.com/support/pages/node/6373004
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/190991
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.