CVE-2020-4794

IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force...

IBM Automation Workstream Services in Cloud Pak for Automation and IBM Process Federation Server Denial of Service Vulnerabilities

IBM Automation Workstream Services in Cloud Pak for Automation and IBM Process Federation Server are IBM Workflow Automation Services and IBM Federation Server. A denial of service vulnerability exists in IBM Automation Workstream Services in Cloud Pak for Automation and IBM Process Federation...

Security Bulletin: IBM Process Federation Server REST API is subject to DoS attacks

Summary IBM Process Federation Server Global Teams REST API does not properly shut down the thread pools that it creates, leading to OutOfMemory exceptions, and could be targeted by DoS attacks. Vulnerability Details CVEID: CVE-2020-4325 DESCRIPTION: The IBM Process Federation Server Global Teams...