CVE Vulnerability

CVE-2019-4045

IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241.

4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

4.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/docview.wss?uid=ibm10870494 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/156241 VDB Entry Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf1:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.5.6.0:cf2:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.6.0.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201712:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.6.0.0:cf201803:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.5.7.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:*:*:*:*
cpe:2.3:a:ibm:business_process_manager:8.5.6.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:*:*:*:*
Information

Published : 2019-04-08 03:29

Updated : 2022-04-05 08:30

NVD link : CVE-2019-4045

Mitre link : CVE-2019-4045

Products Affected
No products.
CWE
NVD-CWE-noinfo