IBM Cloud Pak for Business Automation information disclosure
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users. IBM X-Force ID: 264805.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-200 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor |
Type: CWE
Description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 4.9 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Version: 3.1
Base score: 4.9
Base severity: MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N