CVE-2019-4479

CVE-2019-4479 is linked to IBM Business Process Manager (BPM) and IBM Business Automation Workflow (BAW). The connected IBM bulletins describe two concrete exposure types: (1) SQL injection allowing a remote attacker to view/modify/delete data via crafted SQL, affecting BPM/BAW across multiple ve...

Security Bulletin: Open redirect security vulnerability in IBM Business Automation Workflow and IBM Business Process Manager (BPM) (CVE-2019-4479)

Summary IBM Business Process Manager and IBM Business Automation Workflow could allow a remote attacker to conduct phishing attacks, using an open redirect attack. Vulnerability Details CVEID: CVE-2019-4479 DESCRIPTION: IBM Business Process Manager and IBM Business Automation Workflow could allow...