Lucene search

[email protected]NVD:CVE-2022-35279

HistoryNov 03, 2022 - 8:15 p.m.

CVE-2022-35279

2022-11-0320:15:28

CWE-312

[email protected]

web.nvd.nist.gov

ibm business automation workflow

sensitive information disclosure

authenticated users

ibm x-force

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

19.7%

JSON

“IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537.”

Affected configurations

Nvd

Node

ibmbusiness_automation_workflowRange18.0.0.0–18.0.0.2traditional

ibmbusiness_automation_workflowRange19.0.0.0–19.0.0.3traditional

ibmbusiness_automation_workflowMatch20.0.0.1traditional

ibmbusiness_automation_workflowMatch20.0.0.1-containers

ibmbusiness_automation_workflowMatch20.0.0.2traditional

ibmbusiness_automation_workflowMatch20.0.0.2-containers

ibmbusiness_automation_workflowMatch21.0.1traditional

ibmbusiness_automation_workflowMatch21.0.2traditional

ibmbusiness_automation_workflowMatch21.0.2-containers

ibmbusiness_automation_workflowMatch21.0.3traditional

ibmbusiness_automation_workflowMatch21.0.3if002containers

ibmbusiness_automation_workflowMatch21.0.3if005containers

ibmbusiness_automation_workflowMatch21.0.3if006containers

ibmbusiness_automation_workflowMatch21.0.3if007containers

ibmbusiness_automation_workflowMatch21.0.3if008containers

ibmbusiness_automation_workflowMatch21.0.3if009containers

ibmbusiness_automation_workflowMatch21.0.3if010containers

ibmbusiness_automation_workflowMatch21.0.3if011containers

ibmbusiness_automation_workflowMatch22.0.1traditional

ibmbusiness_automation_workflowMatch22.0.1-containers

ibmbusiness_automation_workflowMatch22.0.1if001containers

VendorProductVersionCPE
ibmbusiness_automation_workflow*cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow20.0.0.1cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow20.0.0.1cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:-:*:*:containers:*:*:*
ibmbusiness_automation_workflow20.0.0.2cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow20.0.0.2cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:-:*:*:containers:*:*:*
ibmbusiness_automation_workflow21.0.1cpe:2.3:a:ibm:business_automation_workflow:21.0.1:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow21.0.2cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow21.0.2cpe:2.3:a:ibm:business_automation_workflow:21.0.2:-:*:*:containers:*:*:*
ibmbusiness_automation_workflow21.0.3cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:traditional:*:*:*
ibmbusiness_automation_workflow21.0.3cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:containers:*:*:*

Vendor	Product	Version	CPE
ibm	business_automation_workflow	*	cpe:2.3:a:ibm:business_automation_workflow:::::traditional:::*
ibm	business_automation_workflow	20.0.0.1	cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1::::traditional:::
ibm	business_automation_workflow	20.0.0.1	cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:-:::containers:::*
ibm	business_automation_workflow	20.0.0.2	cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2::::traditional:::
ibm	business_automation_workflow	20.0.0.2	cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:-:::containers:::*
ibm	business_automation_workflow	21.0.1	cpe:2.3:a:ibm:business_automation_workflow:21.0.1::::traditional:::
ibm	business_automation_workflow	21.0.2	cpe:2.3:a:ibm:business_automation_workflow:21.0.2::::traditional:::
ibm	business_automation_workflow	21.0.2	cpe:2.3:a:ibm:business_automation_workflow:21.0.2:-:::containers:::*
ibm	business_automation_workflow	21.0.3	cpe:2.3:a:ibm:business_automation_workflow:21.0.3::::traditional:::
ibm	business_automation_workflow	21.0.3	cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:::containers:::*