Unrated severityNVD Advisory· Published May 29, 2020· Updated Sep 17, 2024

CVE-2020-4490

Description

IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Business Process Managerllm-fuzzy2 versions
8.0, 8.5, 8.6+ 1 more
- (no CPE)range: 8.0, 8.5, 8.6
- (no CPE)range: 8.0
IBM/Business Automation Workflowllm-fuzzy2 versions
18, 19+ 1 more
- (no CPE)range: 18, 19
- (no CPE)range: 18.0.0.0

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/181989mitrevdb-entryx_refsource_XF
www.ibm.com/support/pages/node/6217550mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000