description: IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.
problem types: Denial of Service
affected:
{
product: Automation Workstream Services
vendor: IBM
versions:
status: affected, version: 19.0.3
status: affected, version: 20.0.1
status: affected, version: 20.0.2
}
{
product: Business Process Manager
vendor: IBM
versions:
status: affected, version: 8.6
}
{
product: Business Automation Workflow
vendor: IBM
versions:
status: affected, version: 19.0
status: affected, version: 20.0
status: affected, version: 18.0
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 4.7
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/A:L/I:N/C:L/AC:L/PR:L/S:U/AV:N/UI:N/RC:C/E:U/RL:O
version: 3.0
]