Data Exposure Flaw in IBM Business Automation Workflow and Business Process Manager

CVE-2021-39046

What is CVE-2021-39046?

IBM Business Automation Workflow and Business Process Manager exhibit a vulnerability where user credentials are stored in plaintext. This flaw allows privileged users to access sensitive information without encryption, creating significant risks to data confidentiality and system integrity. Organizations using these products should assess their security posture and implement enhancements to mitigate the risks associated with credential exposure.

References