Code injection

2022-03-1816:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

JSON

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346.

CPENameOperatorVersion
business_automation_workfloweq18.0.0.1
business_automation_workfloweq18.0.0.0
business_automation_workfloweq18.0.0.2
business_automation_workfloweq19.0.0.3
business_automation_workfloweq19.0.0.1
business_automation_workfloweq19.0.0.2
business_automation_workfloweq20.0.0.1
business_automation_workfloweq20.0.0.2
business_automation_workfloweq21.0.2
business_process_managereq8.5

Name	Operator	Version
business_automation_workflow	eq	18.0.0.1
business_automation_workflow	eq	18.0.0.0
business_automation_workflow	eq	18.0.0.2
business_automation_workflow	eq	19.0.0.3
business_automation_workflow	eq	19.0.0.1
business_automation_workflow	eq	19.0.0.2
business_automation_workflow	eq	20.0.0.1
business_automation_workflow	eq	20.0.0.2
business_automation_workflow	eq	21.0.2
business_process_manager	eq	8.5