Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66267
HistoryMar 22, 2022 - 12:00 a.m.

IBM Business Automation Workflow and Business Process Manager Information Disclosure Vulnerability

2022-03-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
ibm
workflow
process manager
information disclosure
vulnerability
automation
workflow management
compliance management
user credentials
plaintext
privileged attackers
security

EPSS

0.001

Percentile

23.7%

IBM Business Automation Workflow is a set of workflow automation solutions from IBM in the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.IBM Business Automation Workflow and Business Process Manager have an information disclosure vulnerability that stems from the fact that IBM Business Automation Workflow and IBM Business Process Manager affected versions store user credentials in plaintext, which can be exploited by privileged attackers to read these credentials.

EPSS

0.001

Percentile

23.7%

Related for CNVD-2022-66267