CVE-2021-20626: Undefined Security Weakness

Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

How to Protect Your Downstream Workflows

Learn how to protect your downstream workflows without interruption...

Cybozu Office Operation Restriction Bypass Vulnerability (CNVD-2021-18064)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operational restriction bypass vulnerability exists in the workflow in Cybozu Office. An attacker could exploit the vulnerability to alter workflow data without proper privileges...

Multiple vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1657 Operational restrictions bypass vulnerability in Scheduler CWE-264 - CVE-2021-20624 CyVDB-1727 Operational restrictions bypass vulnerability in Bulletin Board CWE-264 - CVE-2021-20625...

Cybozu Office 安全漏洞

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operational restriction bypass vulnerability exists in the workflow in Cybozu Office. An attacker could exploit the vulnerability to alter workflow data without proper privileges...

Logic Flaw Vulnerability in Galloping Workflow Engine CCBMP Workflow Management System, Process Designer System

Jinan Chidori Information Technology Co., Ltd. specializes in process engine form engine research and development and innovation. A logic flaw vulnerability exists in the workflow engine CCBMP workflow management system and process designer system. An attacker can utilize the vulnerability to...

Security Bulletin: Multiple security vulnerabilities with IBM Content Navigator component in IBM Business Automation Workflow - CVE-2020-4687, CVE-2020-4760, CVE-2020-4704

Summary The embedded IBM Content Navigator, that is shipped with IBM Business Automation Workflow is vulnerable to several security vulnerabilities. Vulnerability Details CVEID: CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by...

Security Bulletin: Information leakage vulnerability affect IBM Business Automation Workflow - CVE-2021-20358

Summary IBM Business Automation Workflow may leak sensitive information in trace when emitting events for Business Automation Insights. Vulnerability Details CVEID: CVE-2021-20358 DESCRIPTION: IBM Business Automation Insights stores potentially sensitive information in clear text in API connectio...

IBM Engineering Workflow Management Cross-Site Scripting Vulnerability (CNVD-2021-14750)

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

PT-2021-3204

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to an unlimited file upload vulnerability in the database update module of the WorkFlow system, which can allow an attacker to execute arbitrary code by replacing the...

PT-2021-3215

Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the database update module of the WorkFlow system. Exploitation of this issue can allow an attacker to execute...

PT-2021-3213

Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow Auditor service of the LOCMAN:PLM system. This could allow an attacker to execute arbitrary code...

PT-2021-3209

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to a module for creating, editing, and saving scheme types of typical and working business processes, defining business process properties, and creating lists of...

PT-2021-3221

Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN WorkFlow and LOCMAN WorkFlow Configurator modules of the LOCMAN:PLM system. Exploitation of this issue...

PT-2021-3214

Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to a data exchange module vulnerability in the "ЛОЦМАН WorkFlow" subsystem, which allows for unlimited upload of dangerous file types between different "ЛОЦМАН WorkFlo...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is Github an open source application. Provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that allows bypassing restrictions tha...

IBM Engineering Workflow Management 跨站脚本漏洞

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

Argo Code Issues Vulnerabilities

Argo is an open source container native workflow engine. A code issue vulnerability exists in Argo CD versions prior to 1.8.4, which stems from the incorrect handling of Token in the util/session/sessionmanager.go file, resulting in the Token remaining valid after the user is unavailable. No...

Security Bulletin: Multiple CVEs - Vulnerabilities in IBM Java Runtime affect IBM Integration Designer used in IBM Business Automation Workflow and IBM Business Process Manager

Summary Vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Integration Designer. IBM Integration Designer has addressed the following CVEs. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries compone...