Login Request a demo
Medium severity · published Nov 5, 2021
CVE-2021-29753
IBM Business Automation Workflow 18
5.9
CVSS
0.8%
EPSS
No
On KEV
Description
IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Business Automation Workflow · Ibm
18.0.0.0; 19.0.0.0; 20.0.0.0; 21.0.0.0 · source: NVD
BP
Business Process Manager · Ibm
8.5.0.0; 8.6.0.0 · source: NVD
Affected product
BA
Business Automation Workflow
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-29753
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-29753
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/201919
Vendor Advisory
https://www.ibm.com/support/pages/node/6513703
More from Business Automation Workflow
8.8
CVE-2022-42435
IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request…
8.8
CVE-2018-2000
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
8.8
CVE-2018-1674
IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection
8.2
CVE-2019-4424
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
7.5
CVE-2022-43864
IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system