Lucene search
IBMFDF8977EA878A0BCCCD18A38BE80346A54795030907638C6BE145DC3FFC184E7HistoryJul 01, 2024 - 12:00 p.m.
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.1.0
2024-07-0112:00:14
www.ibm.com
2
ibm
business automation manager
open editions
9.1.0
apache commons codec
6.6 Medium
AI Score
Confidence
High
Summary
In addition to updates of open source dependencies, the following security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.1.0
Vulnerability Details
**IBM X-Force ID:**177835
**DESCRIPTION:**Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. An attacker could exploit this vulnerability using a method call to obtain sensitive information.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/177835 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Business Automation Manager Open Editions | 9.0.0, 9.0.1 |
Remediation/Fixes
| IBM strongly suggests the following remediation / fix: Product(s) | Version(s) | Remediation/Fix |
|---|---|---|
| IBM Business Automation Manager Open Editions | 9.0.0, 9.0.1 | Download 9.1.0 and follow instructions. |
Workarounds and Mitigations
None
Affected configurations
Node
ibmbusiness_automation_workflowMatch9.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm business automation manager open editions | eq | 9.1.0 |
6.6 Medium
AI Score
Confidence
High