CVE-2021-29751

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

Score

CVSS 3.1 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2021-06-28

Last modified

2024-09-17

Affected products

• Business Automation Workflow (Ibm)
• Business Process Manager (Ibm)
• Cloud Pak For Automation (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/201779
• https://www.ibm.com/support/pages/node/6465127
• https://www.ibm.com/support/pages/node/6467055