cbcvebase.
CVE-2019-4045
published 2019-04-08

CVE-2019-4045: IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a…

medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241.

Affected

9 ranges
VendorProductVersion rangeFixed in
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow——
ibmbusiness_automation_workflow18.0.0.0 – 18.0.0.2—
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager——
ibmbusiness_process_manager8.5.0.0 – 8.5.0.2—