CVE-2021-29751

CVSS 3.1 LOWEPSS 0.9%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 3.1EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 jun 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C

Produtos afetados

IBM · Business Automation Workflow IBM · Business Process Manager IBM · Cloud Pak for Automation

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/201779 https://www.ibm.com/support/pages/node/6465127 https://www.ibm.com/support/pages/node/6467055