CVE-2020-4794

CVE-2020-4794 affects IBM Automation Workstream Services (19.0.3, 20.0.1, 20.0.2), IBM Business Automation Workflow (18.0, 19.0, 20.0; containerized 20.0), and IBM Business Process Manager 8.6. The issue is an authorization checking flaw that could allow an authenticated user to obtain sensitive ...

Security Bulletin: Information disclosure and Denial of Service vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-4794

Summary The optional component Process Federation Server that is shipped with IBM Business Process Manager and IBM Business Automation Workflow is vulnerable to a information disclosure and denial of service attack. Vulnerability Details CVEID: CVE-2020-4794 DESCRIPTION: IBM Process Federation...