CVE-2020-4794

IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/189445	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6359463	Patch Vendor Advisory

Configuration 1

cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:express:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.6.0:-:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.5.6.0:-:*:*:express:*:*:* cpe:2.3:a:ibm:automation_workstream_services:20.0.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:automation_workstream_services:20.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:automation_workstream_services:19.0.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:business_process_manager:8.6:*:*:*:standard:*:*:* cpe:2.3:a:ibm:business_process_manager:8.6:*:*:*:express:*:*:* cpe:2.3:a:ibm:business_automation_workflow:20.0.0.0:*:*:*:docker:*:*:* cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:18.0.0.2:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:19.0.0.1:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:19.0.0.2:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:19.0.0.3:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:19.0.0.0:*:*:*:-:*:*:* cpe:2.3:a:ibm:business_automation_workflow:20.0.2.0:*:*:*:-:*:*:*

---

Published : 2020-12-21 06:15

Updated : 2020-12-22 04:28

---

NVD link : CVE-2020-4794

Mitre link : CVE-2020-4794

No products.

CWE-863