CVE-2020-4531

CWE-252 — Unchecked Return Value3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 68.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Business Automation WorkflowIBM Business Process Manager
Timeline
PublishedSep 25
Latest updateMay 24

Description

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182715.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5ibm/business_process_manager8.0, 8.5, 8.6+2
▶NVDibm/business_process_manager8.0.0.0, 8.5.0.0, 8.6.0.0+2
▶CVEListV5ibm/business_automation_workflow18.0, 19.0, 20.0+2
▶NVDibm/business_automation_workflow18.0.0.0, 19.0.0.0, 20.0.0.0+2

🔴Vulnerability Details

2
GHSA
GHSA-2c29-84m2-9q27: IBM Business Automation Workflow 18↗2022-05-24
▶
CVEList
CVE-2020-4531: IBM Business Automation Workflow 18↗2020-09-25
▶