VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 21, 2020· Updated Jun 17, 2026

CVE-2020-4794

CVE-2020-4794

Description

IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

57
  • IBM/Automation Workstream Services5 versions
    cpe:2.3:a:ibm:automation_workstream_services:19.0.3:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:automation_workstream_services:19.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:automation_workstream_services:20.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:automation_workstream_services:20.0.2:*:*:*:*:*:*:*
    • (no CPE)range: 19.0.3, 20.0.1, 20.0.2
    • (no CPE)range: 19.0.3
  • IBM/Business Automation Workflow12 versions
    cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:-:*:*:*+ 11 more
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.1:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.2:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:19.0.0.0:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:19.0.0.1:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:19.0.0.2:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:19.0.0.3:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:20.0.0.0:*:*:*:docker:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:-:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:20.0.2.0:*:*:*:-:*:*:*
    • (no CPE)range: 18.0, 19.0, 20.0
    • (no CPE)range: 19.0
  • IBM/Business Process Manager40 versions
    cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*+ 39 more
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:-:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:-:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201606:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201609:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201612:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201703:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.7.0:cf201706:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6:*:*:*:express:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6:*:*:*:standard:*:*:*
    • (no CPE)range: 8.6
    • (no CPE)range: 8.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.