5.3 Medium

CVE-2020-4532 IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6,…

Description

IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182716.

Affected products and versions

Product	Affected versions	Fixed in
Business Process Manager Express	8.6	No fix stated
Business Process Manager Express 8.5	8.5.5 → 8.5.7	No fix stated

Do you use Business Process Manager Express?

Track this CVE Watch Business Process Manager Express Check my SBOMs

www.cveye.io/en/cve/CVE-2020-4532

Timeline

Published June 17, 2020
Last modified September 16, 2024

References

www.ibm.com www.ibm.com
ibm-baw-cve20204532-info-disc (182716) exchange.xforce.ibmcloud.com

Track this CVE