Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Cloud Pak for Business Automation incorrect privilege assignment
Vulnerability Description
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly grants access to user queries in an unexpected context.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
特权授予不正确
Vulnerability Title
IBM Cloud Pak for Business Automation 安全漏洞
Vulnerability Description
IBM Cloud Pak for Business Automation是美国国际商业机器（IBM）公司的一组模块化的集成软件组件，专为任何混合云而构建，旨在实现工作自动化和加速业务增长。 IBM Cloud Pak for Business Automation存在安全漏洞。攻击者利用该漏洞可以越权访问数据。以下版本受到影响：18.0.0版本、18.0.1版本、18.0.2版本、19.0.1版本、19.0.2版本、19.0.3版本、20.0.1版本、20.0.2版本、20.0.3版本、21.0.1版本
CVSS Information
N/A
Vulnerability Type
N/A