6.5

CVE-2024-38321

IBM Business Automation Workflow information disclosure

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could be read by an authenticated user.  IBM X-Force ID:  284868.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Business Automation Workflow Version 20.0.0.1 SwEdition containers
Ibm ≫ Business Automation Workflow Version 20.0.0.2 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.2 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if002 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if005 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if006 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if007 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if008 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if009 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if010 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if011 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if012 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if013 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if014 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if015 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if016 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if017 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if028 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if029 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if030 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if031 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if032 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if033 SwEdition containers
Ibm ≫ Business Automation Workflow Version 21.0.3 Update if034 SwEdition containers
Ibm ≫ Business Automation Workflow Version 22.0.1 SwEdition containers
Ibm ≫ Business Automation Workflow Version 22.0.2 SwEdition containers
Ibm ≫ Business Automation Workflow Version 23.0.1 SwEdition containers
Ibm ≫ Business Automation Workflow Version 23.0.2 SwEdition containers
Ibm ≫ Business Automation Workflow SwEdition traditional Version >= 19.0.0.1 <= 19.0.0.3
Ibm ≫ Business Automation Workflow SwEdition traditional Version >= 20.0.0.1 <= 20.0.0.2
Ibm ≫ Business Automation Workflow SwEdition traditional Version >= 21.0.1 <= 21.0.3.0
Ibm ≫ Business Automation Workflow SwEdition traditional Version >= 22.0.1 <= 22.0.2
Ibm ≫ Business Automation Workflow SwEdition traditional Version >= 23.0.1 <= 23.0.2
Ibm ≫ Business Automation Workflow SwEdition enterprise_service_bus Version >= 23.0.1 <= 23.0.2
Ibm ≫ Business Automation Workflow Version 22.0.2 SwEdition enterprise_service_bus
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.332
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
IBM 5.3 1.6 3.6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.

https://exchange.xforce.ibmcloud.com/vulnerabilities/294868
Broken Link
https://www.ibm.com/support/pages/node/7162334
Vendor Advisory