Security feature bypass

2020-05-2913:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

JSON

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989

CPENameOperatorVersion
business_automation_workfloweq18.0.0.0
business_automation_workfloweq19.0.0.0
business_process_managereq8.5.0.0
business_process_managereq8.0.0.0
business_process_managereq8.6.0.0

Name	Operator	Version
business_automation_workflow	eq	18.0.0.0
business_automation_workflow	eq	19.0.0.0
business_process_manager	eq	8.5.0.0
business_process_manager	eq	8.0.0.0
business_process_manager	eq	8.6.0.0