VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jun 28, 2021· Updated Jun 17, 2026

CVE-2021-29751

CVE-2021-29751

Description

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • IBM/Business Automation Workflow5 versions
    cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:business_automation_workflow:18.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:19.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_automation_workflow:20.0.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 18.0, 19.0, and 20.0
    • (no CPE)range: 18.0
  • IBM/Business Process Manager4 versions
    cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.6.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 8.5 and 8.6
    • (no CPE)range: 8.5
  • IBM/Cloud Pak For Business Automationcpe-rescue
    Range: 20.0.3.IF002

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.