The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software lies in access control errors, which allow attackers to gain access to protected information.

🗓️ 07 Jul 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Access control errors in IBM Process Manager and IBM Automation Workflow permit remote data access.

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: Information disclosure vulnerability affects IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-4532	16 Jun 202017:12	–	ibm
BDU FSTEC	The vulnerability of the Enhanced Charging Service, a microprogramming-based software service for Cisco ASR 5000 routers, allows attackers to circumvent traffic classification rules and potentially avoid paying for the usage of network traffic.	7 Jul 202000:00	–	bdu_fstec
Cisco	Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability	17 Jun 202016:00	–	cisco
CNVD	Cisco ASR 5000 Input Validation Error Vulnerability	18 Jun 202000:00	–	cnvd
CNVD	IBM Business Process Manager and IBM Business Automation Workflow Information Disclosure Vulnerability	18 Jun 202000:00	–	cnvd
CVE	CVE-2020-3244	18 Jun 202002:21	–	cve
CVE	CVE-2020-4532	17 Jun 202017:40	–	cve
Cvelist	CVE-2020-3244 Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability	18 Jun 202002:21	–	cvelist
Cvelist	CVE-2020-4532	17 Jun 202017:40	–	cvelist
EUVD	EUVD-2020-24515	7 Oct 202500:30	–	euvd

Vulners

Node

ibm business_process_managerMatch8.5.5

OR

ibm business_process_managerMatch8.5.6

OR

ibm business_process_managerMatch8.5.7

OR

ibm business_process_managerMatch8.6

OR

ibm business_automation_workflowMatch19.0.0.3

OR

ibm business_automation_workflowMatch18.0.0.1

Source	Link
cxsecurity	www.cxsecurity.com/cveshow/CVE-2020-4532/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3244
ibm	www.ibm.com/support/pages/node/6233276
nvd	www.nvd.nist.gov/vuln/detail

07 Jul 2020 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25

CVSS 35.3

EPSS0.01299

Business Process Manager Automation Workflow Access control errors Remote attackers Protected data