CVEvulnerability

CVE-2022-35279

4.3 MEDIUM Published 2022-11-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-312

Description

"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537."

Affected configurations

• ibm business automation workflow (>= 18.0.0.0 <= 18.0.0.2) • ibm business automation workflow (>= 19.0.0.0 <= 19.0.0.3) • ibm business automation workflow 20.0.0.1 • ibm business automation workflow 20.0.0.2 • ibm business automation workflow 21.0.1 • ibm business automation workflow 21.0.2 • ibm business automation workflow 21.0.3 • ibm business automation workflow 22.0.1

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References