PT-2021-18453
CVE-2021-29753
·
Published
2021-11-05
·
Updated
2021-11-09
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Business Automation Workflow versions 18 through 21
IBM Business Process Manager versions 8.5 and 8.6
Description
The software transmits or stores authentication credentials using an insecure method, making it susceptible to unauthorized interception and/or retrieval.
Recommendations
For IBM Business Automation Workflow versions 18 through 21, update to a version that uses a secure method for transmitting or storing authentication credentials.
For IBM Business Process Manager versions 8.5 and 8.6, update to a version that uses a secure method for transmitting or storing authentication credentials.
Found an issue in the description? Have something to add? Feel free to write us 👾