CVE-2021-29753

Description

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.07

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 18.0.0.0	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0.0.0	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 20.0.0.0	Windows
Vulnerabilities CVE-2021-29753,CVE-2021-29835,CVE-2021-38893,CVE-2021-38900 are affected in IBM Business Automation Workflow 21.0.0.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234