CVE-2022-35279

published 2022-11-03

CVE-2022-35279: "IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	—	—
ibm	business_automation_workflow	18.0.0.0 – 18.0.0.2	—
ibm	business_automation_workflow	19.0.0.0 – 19.0.0.3	—

CWE-312