CVE-2021-39046

Опубликовано: 18 мар. 2022

Источник: nvd

CVSS3: 4.9

CVSS2: 4

EPSS Низкий

Описание

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/214346
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6564387
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/214346
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6564387
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:18.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:19.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.6:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00145

Низкий

4.9 Medium

CVSS3

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-r6rq-vwqp-j4p3

CVSS3: 4.9

github

почти 4 года назад

EPSS

Процентиль: 35%

0.00145

Низкий

4.9 Medium

CVSS3

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-522