CVE-2021-38900

IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2021-12-21

Last modified

2024-09-17

Affected products

• Business Automation Workflow (Ibm)
• Business Process Manager (Ibm)
• Cloud Pak For Automation (Ibm)
• Workflow Process Service (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/209607
• https://www.ibm.com/support/pages/node/6527776
• https://www.ibm.com/support/pages/node/6528296