CVE-2018-1885

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2019-04-08

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Business Automation Workflow (Ibm)
• Business Process Manager (Ibm)
• Business Process Manager Enterprise Service Bus (Ibm)
• Websphere Enterprise Service Bus (Ibm)

References

• http://www.securityfocus.com/bid/107863
• https://exchange.xforce.ibmcloud.com/vulnerabilities/152020
• https://www.ibm.com/support/docview.wss?uid=ibm10878106