Riskcovery

CVE-2020-4490

State
Published
Severity
5.3 Medium
Published
May 29, 2020
Updated
Sep 17, 2024
Reserved
Dec 30, 2019

Read the record on cve.org

Description

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989

Scores

CVSSScoreVectorSource
3.05.3 MediumCVSS:3.0/UI:R/S:U/AV:N/PR:N/A:N/AC:H/I:H/C:N/E:U/RL:O/RC:Cibm

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Business Process Manager AdvancedIBM
  • 8.0Affected
  • 8.0.1Affected
  • 8.0.1.1Affected
  • 8.0.1.2Affected
  • 8.5Affected
  • 8.5.0.1Affected
  • 8.5.5Affected
  • 8.0.1.3Affected
  • 8.5.6Affected
  • 8.5.0.2Affected
  • 8.5.7Affected
  • 8.5.7.CF201609Affected
  • 8.5.6.1Affected
  • 8.5.6.2Affected
  • 8.5.7.CF201606Affected
  • 8.5.7.CF201612Affected
  • 8.5.7.CF201703Affected
  • 8.5.7.CF201706Affected
  • 8.6Affected
Business Automation WorkflowIBM
  • 18.0.0.0Affected
  • 19.0.0.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.