Information Disclosure Vulnerability in IBM Business Automation Workflow
CVE-2020-4900
5.1MEDIUM
Summary
An information disclosure vulnerability exists in IBM Business Automation Workflow 19.0.0.3 due to inadequate protection of sensitive information stored in log files. Local users can potentially read this information, leading to unauthorized access to sensitive data. For further details, refer to IBM's support page and the X-Force database entry.
Affected Version(s)
Business Automation Workflow 19.0.0.3
References
CVSS V3.1
Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved