CVE-2022-42435
Vulnerability from cvelistv5
Published
2023-01-03 23:16
Modified
2024-08-03 13:10
Severity ?
4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Summary
IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.
References
psirt@us.ibm.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/238054VDB Entry, Vendor Advisory
psirt@us.ibm.comhttps://www.ibm.com/support/pages/node/6852217Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/238054VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.ibm.com/support/pages/node/6852217Patch, Vendor Advisory
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:10:41.010Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.ibm.com/support/pages/node/6852217"
          },
          {
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/238054"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Business Automation Workflow",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "18.0.0,   18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(204, 217, 226);\"\u003eIBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nIBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-03T23:16:13.875Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.ibm.com/support/pages/node/6852217"
        },
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/238054"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "IBM Business Automation Workflow cross-site request forgery",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2022-42435",
    "datePublished": "2023-01-03T23:16:13.875Z",
    "dateReserved": "2022-10-06T15:51:26.497Z",
    "dateUpdated": "2024-08-03T13:10:41.010Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:18.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EBA0B449-9C87-40A1-A751-D7CB7500C95B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:18.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9518076E-2A41-409A-BB38-23E68392C57F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:18.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB74871E-27A9-40BB-8D55-45E00CF858DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:19.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5809E8E5-A954-4E65-A594-582A56680FA2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:19.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5B8D494-90DD-42AA-8D83-264C5B63CF44\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:19.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7CD38048-750C-4141-8A52-DB4071D38270\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:20.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E33C724D-CA76-46DF-B397-7874AE12F14B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:20.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8E6A7059-10C5-48FC-9A3E-FCEA5CF3903F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:20.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"451CB880-C26B-4A39-AD06-73A6BD13973F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"50E0F9C5-ACBB-42FE-BDC6-96BF3492C7DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if001:*:*:*:*:*:*\", \"matchCriteriaId\": \"6503FA0A-D948-47A4-9DEE-D58910E52EB4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if002:*:*:*:*:*:*\", \"matchCriteriaId\": \"69E56B42-5F7C-451D-92CE-3D2437BABF62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if003:*:*:*:*:*:*\", \"matchCriteriaId\": \"A72358A4-1871-4EDF-851B-488D5E90BD4D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if004:*:*:*:*:*:*\", \"matchCriteriaId\": \"23047A79-1A03-4D55-8343-83F04379BF9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if005:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0CFF4A6-3622-47E7-8DAD-92FD6A0244CE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if006:*:*:*:*:*:*\", \"matchCriteriaId\": \"6DFBAF79-67A2-4BA2-A13D-28F7C69630A9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if007:*:*:*:*:*:*\", \"matchCriteriaId\": \"89601534-F374-48A4-9848-959B48B3414A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"068CE38A-FBC4-43BF-BD1D-F65F9ADC5141\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if001:*:*:*:*:*:*\", \"matchCriteriaId\": \"571A6ACF-E38E-4FDE-A32E-3DDA18D17316\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if002:*:*:*:*:*:*\", \"matchCriteriaId\": \"66AA5938-DADC-47BE-BBE0-31B349631E32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if003:*:*:*:*:*:*\", \"matchCriteriaId\": \"B75749E3-C4A0-49FD-9725-4F5514535284\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if004:*:*:*:*:*:*\", \"matchCriteriaId\": \"417A01BE-CC6D-4A54-A121-17EDB7BF1646\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if005:*:*:*:*:*:*\", \"matchCriteriaId\": \"F6756C93-B5A1-4A47-94B5-E9623212BD8D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if006:*:*:*:*:*:*\", \"matchCriteriaId\": \"4784BE72-DA3D-4567-AA2A-49ABA7D2F066\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if007:*:*:*:*:*:*\", \"matchCriteriaId\": \"B92DC009-0997-4325-8469-CAB2F963163C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if008:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B373A3-09FA-4650-A6D9-1412C5475622\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if009:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C0A9A11-0700-4254-B6AE-558A86E03F48\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if010:*:*:*:*:*:*\", \"matchCriteriaId\": \"96AACA6A-4CE6-41EA-9906-04E05BD75D3D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if011:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B1AA6DF-E73A-4A75-863C-BD116AE917F7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if012:*:*:*:*:*:*\", \"matchCriteriaId\": \"F3B4C2BF-9BD4-4E99-8E2F-6396D59E68EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EFE1F088-FAE8-48A9-AEBE-738CB97F984B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if001:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCF074C0-7CE9-42B4-82BA-662662F7E3CE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:*:*:*:*\", \"matchCriteriaId\": \"74DF0590-C1C3-4E46-B1D9-5AEA5767C0FA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if003:*:*:*:*:*:*\", \"matchCriteriaId\": \"4DAA3F18-B2E8-4D91-95B1-BB1C91720790\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if004:*:*:*:*:*:*\", \"matchCriteriaId\": \"529728C6-944C-4DD1-979F-F6E9F02FB36E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:*:*:*:*\", \"matchCriteriaId\": \"00076887-2AF4-4B5B-870A-442E8AF686F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCE5369D-16E2-440E-A97D-8DABCFE9C617\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if007:*:*:*:*:*:*\", \"matchCriteriaId\": \"C41005B8-3D7B-4BF1-83AC-A6816281E0F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if008:*:*:*:*:*:*\", \"matchCriteriaId\": \"82AB2F91-CC3E-4D60-9BA1-0174E70E3DB6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if009:*:*:*:*:*:*\", \"matchCriteriaId\": \"B65FE877-1A93-4432-B335-A12FF7D6C3A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:*:*:*:*\", \"matchCriteriaId\": \"3276D80B-ABB7-41F1-A128-E89CC649EA84\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if011:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FD8A22F-A6C6-4674-B223-3A848C4FA2B4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if012:*:*:*:*:*:*\", \"matchCriteriaId\": \"66EC4C8C-BBBF-4878-AF07-3E9CA8A1FD20\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if013:*:*:*:*:*:*\", \"matchCriteriaId\": \"EBA97707-1843-45B3-911B-7C6EBAFFDC4D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if014:*:*:*:*:*:*\", \"matchCriteriaId\": \"7929C8E9-08F8-49C3-8E41-2B735052CB9E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if015:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F9D2173-471A-460F-86B4-1F8C2A485B2C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1AC8187-347E-4A40-A0FA-B68AFFAA9F2B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if001:*:*:*:*:*:*\", \"matchCriteriaId\": \"65D1A1BA-657B-43CD-9718-1D7A8D5223C7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if002:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE3823AF-8942-4B9C-8D19-E5DEAC7FBFCB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if003:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E8044CD-FB8B-48E8-9B4B-86BC9A25D3D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if004:*:*:*:*:*:*\", \"matchCriteriaId\": \"9427CF82-1EE3-4B54-9D20-B45D5452145D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if005:*:*:*:*:*:*\", \"matchCriteriaId\": \"18B67072-F540-4131-A133-552AF68D0FD3\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"\\nIBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.\\n\\n\"}, {\"lang\": \"es\", \"value\": \"IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0. 3 y 22.0.1 es vulnerable a Cross Site Request Forgery, lo que podr\\u00eda permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario en el que conf\\u00eda el sitio web. ID de IBM X-Force: 238054.\"}]",
      "id": "CVE-2022-42435",
      "lastModified": "2024-11-21T07:24:57.990",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"psirt@us.ibm.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}]}",
      "published": "2023-01-04T00:15:10.077",
      "references": "[{\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/238054\", \"source\": \"psirt@us.ibm.com\", \"tags\": [\"VDB Entry\", \"Vendor Advisory\"]}, {\"url\": \"https://www.ibm.com/support/pages/node/6852217\", \"source\": \"psirt@us.ibm.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/238054\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"VDB Entry\", \"Vendor Advisory\"]}, {\"url\": \"https://www.ibm.com/support/pages/node/6852217\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "psirt@us.ibm.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"psirt@us.ibm.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-352\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-42435\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2023-01-04T00:15:10.077\",\"lastModified\":\"2024-11-21T07:24:57.990\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"\\nIBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.\\n\\n\"},{\"lang\":\"es\",\"value\":\"IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0. 3 y 22.0.1 es vulnerable a Cross Site Request Forgery, lo que podr\u00eda permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario en el que conf\u00eda el sitio web. ID de IBM X-Force: 238054.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-352\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:18.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBA0B449-9C87-40A1-A751-D7CB7500C95B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:18.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9518076E-2A41-409A-BB38-23E68392C57F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:18.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB74871E-27A9-40BB-8D55-45E00CF858DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:19.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5809E8E5-A954-4E65-A594-582A56680FA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:19.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5B8D494-90DD-42AA-8D83-264C5B63CF44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:19.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CD38048-750C-4141-8A52-DB4071D38270\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:20.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E33C724D-CA76-46DF-B397-7874AE12F14B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:20.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E6A7059-10C5-48FC-9A3E-FCEA5CF3903F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:20.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"451CB880-C26B-4A39-AD06-73A6BD13973F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50E0F9C5-ACBB-42FE-BDC6-96BF3492C7DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if001:*:*:*:*:*:*\",\"matchCriteriaId\":\"6503FA0A-D948-47A4-9DEE-D58910E52EB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if002:*:*:*:*:*:*\",\"matchCriteriaId\":\"69E56B42-5F7C-451D-92CE-3D2437BABF62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if003:*:*:*:*:*:*\",\"matchCriteriaId\":\"A72358A4-1871-4EDF-851B-488D5E90BD4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if004:*:*:*:*:*:*\",\"matchCriteriaId\":\"23047A79-1A03-4D55-8343-83F04379BF9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if005:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0CFF4A6-3622-47E7-8DAD-92FD6A0244CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if006:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DFBAF79-67A2-4BA2-A13D-28F7C69630A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.1:if007:*:*:*:*:*:*\",\"matchCriteriaId\":\"89601534-F374-48A4-9848-959B48B3414A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"068CE38A-FBC4-43BF-BD1D-F65F9ADC5141\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if001:*:*:*:*:*:*\",\"matchCriteriaId\":\"571A6ACF-E38E-4FDE-A32E-3DDA18D17316\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if002:*:*:*:*:*:*\",\"matchCriteriaId\":\"66AA5938-DADC-47BE-BBE0-31B349631E32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if003:*:*:*:*:*:*\",\"matchCriteriaId\":\"B75749E3-C4A0-49FD-9725-4F5514535284\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if004:*:*:*:*:*:*\",\"matchCriteriaId\":\"417A01BE-CC6D-4A54-A121-17EDB7BF1646\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if005:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6756C93-B5A1-4A47-94B5-E9623212BD8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if006:*:*:*:*:*:*\",\"matchCriteriaId\":\"4784BE72-DA3D-4567-AA2A-49ABA7D2F066\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if007:*:*:*:*:*:*\",\"matchCriteriaId\":\"B92DC009-0997-4325-8469-CAB2F963163C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if008:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B373A3-09FA-4650-A6D9-1412C5475622\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if009:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C0A9A11-0700-4254-B6AE-558A86E03F48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if010:*:*:*:*:*:*\",\"matchCriteriaId\":\"96AACA6A-4CE6-41EA-9906-04E05BD75D3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if011:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B1AA6DF-E73A-4A75-863C-BD116AE917F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.2:if012:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3B4C2BF-9BD4-4E99-8E2F-6396D59E68EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFE1F088-FAE8-48A9-AEBE-738CB97F984B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if001:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCF074C0-7CE9-42B4-82BA-662662F7E3CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:*:*:*:*\",\"matchCriteriaId\":\"74DF0590-C1C3-4E46-B1D9-5AEA5767C0FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if003:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DAA3F18-B2E8-4D91-95B1-BB1C91720790\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if004:*:*:*:*:*:*\",\"matchCriteriaId\":\"529728C6-944C-4DD1-979F-F6E9F02FB36E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:*:*:*:*\",\"matchCriteriaId\":\"00076887-2AF4-4B5B-870A-442E8AF686F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCE5369D-16E2-440E-A97D-8DABCFE9C617\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if007:*:*:*:*:*:*\",\"matchCriteriaId\":\"C41005B8-3D7B-4BF1-83AC-A6816281E0F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if008:*:*:*:*:*:*\",\"matchCriteriaId\":\"82AB2F91-CC3E-4D60-9BA1-0174E70E3DB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if009:*:*:*:*:*:*\",\"matchCriteriaId\":\"B65FE877-1A93-4432-B335-A12FF7D6C3A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:*:*:*:*\",\"matchCriteriaId\":\"3276D80B-ABB7-41F1-A128-E89CC649EA84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if011:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FD8A22F-A6C6-4674-B223-3A848C4FA2B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if012:*:*:*:*:*:*\",\"matchCriteriaId\":\"66EC4C8C-BBBF-4878-AF07-3E9CA8A1FD20\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if013:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBA97707-1843-45B3-911B-7C6EBAFFDC4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if014:*:*:*:*:*:*\",\"matchCriteriaId\":\"7929C8E9-08F8-49C3-8E41-2B735052CB9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if015:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F9D2173-471A-460F-86B4-1F8C2A485B2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1AC8187-347E-4A40-A0FA-B68AFFAA9F2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if001:*:*:*:*:*:*\",\"matchCriteriaId\":\"65D1A1BA-657B-43CD-9718-1D7A8D5223C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if002:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE3823AF-8942-4B9C-8D19-E5DEAC7FBFCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if003:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E8044CD-FB8B-48E8-9B4B-86BC9A25D3D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if004:*:*:*:*:*:*\",\"matchCriteriaId\":\"9427CF82-1EE3-4B54-9D20-B45D5452145D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if005:*:*:*:*:*:*\",\"matchCriteriaId\":\"18B67072-F540-4131-A133-552AF68D0FD3\"}]}]}],\"references\":[{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/238054\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"VDB Entry\",\"Vendor Advisory\"]},{\"url\":\"https://www.ibm.com/support/pages/node/6852217\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/238054\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"VDB Entry\",\"Vendor Advisory\"]},{\"url\":\"https://www.ibm.com/support/pages/node/6852217\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.