PT-2021-18453 · Ibm · Ibm Business Process Manager+1

Published 2021-11-05 · Updated 2021-11-09 · CVE-2021-29753

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 18 through 21 IBM Business Process Manager versions 8.5 and 8.6

Description The software transmits or stores authentication credentials using an insecure method, making it susceptible to unauthorized interception and/or retrieval.

Recommendations For IBM Business Automation Workflow versions 18 through 21, update to a version that uses a secure method for transmitting or storing authentication credentials. For IBM Business Process Manager versions 8.5 and 8.6, update to a version that uses a secure method for transmitting or storing authentication credentials.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2021-29753

Affected Products

Ibm Business Automation Workflow

Ibm Business Process Manager

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/201919 · Vendor Advisory
• https://ibm.com/support/pages/node/6513703 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29753 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29753 · Security Note
• https://t.me/cibsecurity/31913 · Telegram Post