PT-2025-18949 · Ibm · Ibm Business Automation Workflow

Published 2025-05-03 · Updated 2025-05-05 · CVE-2025-1495

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 24.0.0 through 24.0.1 IF001

Description The issue is related to missing authorization validation, which may cause the software to leak sensitive information.

Recommendations For IBM Business Automation Workflow versions 24.0.0 through 24.0.1 IF001, consider implementing proper authorization validation to prevent sensitive information leakage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-1495

Affected Products

Ibm Business Automation Workflow

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-1495 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1495 · Vendor Advisory
• https://t.me/cvedetector/24403 · Telegram Post
• https://t.me/cvetracker/22993 · Telegram Post
• https://twitter.com/CVEnew/status/1918745355895603687 · Twitter Post
• https://t.me/cvenotify/120731 · Telegram Post
• https://ibm.com/support/pages/node/7232434 · Vendor Advisory, Patch
• https://twitter.com/cybercronai/status/1919380579042177189 · Twitter Post