IBM Business Automation Workflow 18. 19, 20, 21, and IBM... · CVE-2021-29753 · GitHub Advisory Database · GitHub

IBM Business Automation Workflow 18. 19, 20, 21, and IBM...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References

Published by the National Vulnerability Database

Nov 5, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 30, 2023