Security Bulletin: Information disclosure vulnerability may affect IBM Business Automation Workflow - CVE-2020-4900

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2020-4900 DESCRIPTION: IBM Business Automation Workflow stores potentially sensitive information in log files that could be read by a loca...

CVE-2020-4900

CVE-2020-4900 affects IBM Business Automation Workflow 19.0.0.3, which stores potentially sensitive information in log files that could be read by a local user. This is a local information-disclosure vulnerability in the application’s logging, with a base CVSS v3.1 of 5.5 (MEDIUM) and CVSS v2 of ...

CVE-2020-4900

IBM Business Automation Workflow 19.0.0.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 190991...