CVE-2021-29751

CVSS 3.1 LOWEPSS 0.9%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 3.1EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 jun 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C

Productos afectados

IBM · Business Automation Workflow IBM · Business Process Manager IBM · Cloud Pak for Automation

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/201779 https://www.ibm.com/support/pages/node/6465127 https://www.ibm.com/support/pages/node/6467055