Security Bulletin: Information leakage in IBM Business Automation Workflow (CVE-2018-1999)

Summary An information leakage vulnerability in IBM Business Automation Workflow has been found. Vulnerability Details CVEID: CVE-2018-1999 DESCRIPTION: IBM Business Process Manager could reveal sensitive version information about the server from error pages that could aid an attacker in further...

CVE-2018-1999

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889...

CVE-2018-1999

CVE-2018-1999 describes an information-disclosure flaw in IBM Business Automation Workflow (and related BPM products) where error pages can reveal sensitive server version information. Affected: IBM Business Automation Workflow 18.0.0.0–18.0.0.2; IBM BPM family (V8.0–V8.6 with various fix levels)...