CVE-2020-4531

Katalog CVE

CVSS 5.3 · Medium EPSS 1,4%

Kerentanan Unchecked Return Value pada ibm business automation workflow, ibm business process manager. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182715.

Rincian

Terbit di NVD

25 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-252: Unchecked Return Value

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 72,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/182715 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6336935 advisory vendor