PT-2024-27942 · Ibm · Ibm Business Automation Workflow

Published 2024-08-03 · Updated 2024-09-06 · CVE-2024-38321

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 22.0.2 through 24.0.0

Description The issue concerns the storage of potentially sensitive information in log files under certain situations, which could be read by an authenticated user. This may lead to data exposure.

Recommendations For versions 22.0.2, 23.0.1, 23.0.2, and 24.0.0, upgrade the affected component to a newer version to mitigate the risk of sensitive information exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-38321

Affected Products

Ibm Business Automation Workflow

References · 8

• https://osv.dev/vulnerability/CVE-2024-38321 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38321 · Security Note
• https://ibm.com/support/pages/node/7162334 · Vendor Advisory
• https://t.me/cvenotify/88781 · Telegram Post
• https://t.me/cvenotify/93557 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/294868 · Note
• https://t.me/cvedetector/2393 · Telegram Post
• https://twitter.com/oktsec/status/1823558742186549452 · Twitter Post