PT-2019-9956
CVE-2018-1999
·
Published
2019-04-08
·
Updated
2019-10-09
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Business Automation Workflow versions 18.0.0.0 through 18.0.0.2
Description
The issue could reveal sensitive version information about the server from error pages, potentially aiding an attacker in further attacks against the system.
Recommendations
For versions 18.0.0.0 through 18.0.0.2, consider modifying error pages to hide sensitive version information as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾