CVE-2022-35279 - Vulnerability Details

Vendors	Products
Ibm	Business Automation Workflow

Link	Providers
https://www.ibm.com/support/pages/node/6829847

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-35279", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "dateUpdated": "2024-08-03T09:36:44.258Z", "dateReserved": "2022-07-06T00:00:00", "datePublished": "2022-11-03T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2022-11-03T00:00:00"}, "descriptions": [{"lang": "en", "value": "\"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537.\""}], "affected": [{"vendor": "n/a", "product": "IBM Business Automation Workflow", "versions": [{"version": "\"18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1\"", "status": "affected"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/6829847"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "Information Disclosure"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:36:44.258Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.ibm.com/support/pages/node/6829847", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-35279 (string)

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

dateUpdated : 2024-08-03T09:36:44.258Z (string)

dateReserved : 2022-07-06T00:00:00 (string)

datePublished : 2022-11-03T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

dateUpdated : 2022-11-03T00:00:00 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : "IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537." (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : IBM Business Automation Workflow (string)

versions : [ »

0 : { »

version : "18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1" (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.ibm.com/support/pages/node/6829847 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : Information Disclosure (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T09:36:44.258Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.ibm.com/support/pages/node/6829847 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*", "matchCriteriaId": "EBA0D501-8535-4CAF-BFAD-88AC5E1FBA03", "versionEndIncluding": "18.0.0.2", "versionStartIncluding": "18.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*", "matchCriteriaId": "9BBBCE4C-7230-4CF5-A9BA-1BB8F479E433", "versionEndIncluding": "19.0.0.3", "versionStartIncluding": "19.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*", "matchCriteriaId": "D36329EB-4317-4AB1-85FA-4E23F185C179", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:-:*:*:containers:*:*:*", "matchCriteriaId": "824ACC07-E351-437A-9FAB-7F2E47DE9205", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:*", "matchCriteriaId": "8C7FDEC2-CBE3-4C5B-917D-37F2612018FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:-:*:*:containers:*:*:*", "matchCriteriaId": "485FFABA-EF59-4C36-8B6E-E32A99C02381", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.1:*:*:*:traditional:*:*:*", "matchCriteriaId": "83966976-3307-4B4C-AE62-7BF040BEF0F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:traditional:*:*:*", "matchCriteriaId": "B2A3E3AF-14A2-44E6-A17F-ACD63B010E43", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.2:-:*:*:containers:*:*:*", "matchCriteriaId": "EB656C4F-19FC-4763-93C8-940A2B38B729", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:traditional:*:*:*", "matchCriteriaId": "D1DC801A-0F25-48D2-8465-31B5A0939EE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:containers:*:*:*", "matchCriteriaId": "00F5E82D-712A-4AB2-B0B2-BF03507D17D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:containers:*:*:*", "matchCriteriaId": "0063E78F-2978-43F6-884D-B375E1111E87", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:containers:*:*:*", "matchCriteriaId": "CF6317BE-98DF-4A46-9F5B-326177D6AD68", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if007:*:*:containers:*:*:*", "matchCriteriaId": "72A22C4B-AAF2-4A84-AF39-C1C396031D98", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if008:*:*:containers:*:*:*", "matchCriteriaId": "39015A02-D36E-4CC9-A5E3-877DFD923ACD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if009:*:*:containers:*:*:*", "matchCriteriaId": "19586E74-8802-4C09-A240-D698EE30C570", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:containers:*:*:*", "matchCriteriaId": "4B06D109-E327-4A2A-9FC9-A5F454022C0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if011:*:*:containers:*:*:*", "matchCriteriaId": "E67BEF93-133E-4507-B938-79D943AB82CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:traditional:*:*:*", "matchCriteriaId": "8C6D1E72-FC9F-4A0A-8E80-A3CA8CB0EDAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:22.0.1:-:*:*:containers:*:*:*", "matchCriteriaId": "69B77521-AF61-4711-9219-12D6DADB6F5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if001:*:*:containers:*:*:*", "matchCriteriaId": "E2AEA4BA-C309-4069-9226-B86C1B68F93C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "\"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537.\""}, {"lang": "es", "value": "\"IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3 y 22.0.1 podr\u00edan revelar informaci\u00f3n confidencial de la versi\u00f3n a usuarios autenticados que podr\u00eda usarse en futuros ataques contra el sistema. IBM X-Force ID: 230537.\""}], "id": "CVE-2022-35279", "lastModified": "2024-11-21T07:11:01.907", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-11-03T20:15:28.853", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6829847"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6829847"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-312"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:* (string)

matchCriteriaId : EBA0D501-8535-4CAF-BFAD-88AC5E1FBA03 (string)

versionEndIncluding : 18.0.0.2 (string)

versionStartIncluding : 18.0.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:* (string)

matchCriteriaId : 9BBBCE4C-7230-4CF5-A9BA-1BB8F479E433 (string)

versionEndIncluding : 19.0.0.3 (string)

versionStartIncluding : 19.0.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:* (string)

matchCriteriaId : D36329EB-4317-4AB1-85FA-4E23F185C179 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:-:*:*:containers:*:*:* (string)

matchCriteriaId : 824ACC07-E351-437A-9FAB-7F2E47DE9205 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:* (string)

matchCriteriaId : 8C7FDEC2-CBE3-4C5B-917D-37F2612018FB (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:-:*:*:containers:*:*:* (string)

matchCriteriaId : 485FFABA-EF59-4C36-8B6E-E32A99C02381 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.1:*:*:*:traditional:*:*:* (string)

matchCriteriaId : 83966976-3307-4B4C-AE62-7BF040BEF0F2 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.2:*:*:*:traditional:*:*:* (string)

matchCriteriaId : B2A3E3AF-14A2-44E6-A17F-ACD63B010E43 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.2:-:*:*:containers:*:*:* (string)

matchCriteriaId : EB656C4F-19FC-4763-93C8-940A2B38B729 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:*:*:*:traditional:*:*:* (string)

matchCriteriaId : D1DC801A-0F25-48D2-8465-31B5A0939EE6 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if002:*:*:containers:*:*:* (string)

matchCriteriaId : 00F5E82D-712A-4AB2-B0B2-BF03507D17D2 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if005:*:*:containers:*:*:* (string)

matchCriteriaId : 0063E78F-2978-43F6-884D-B375E1111E87 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if006:*:*:containers:*:*:* (string)

matchCriteriaId : CF6317BE-98DF-4A46-9F5B-326177D6AD68 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if007:*:*:containers:*:*:* (string)

matchCriteriaId : 72A22C4B-AAF2-4A84-AF39-C1C396031D98 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if008:*:*:containers:*:*:* (string)

matchCriteriaId : 39015A02-D36E-4CC9-A5E3-877DFD923ACD (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if009:*:*:containers:*:*:* (string)

matchCriteriaId : 19586E74-8802-4C09-A240-D698EE30C570 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if010:*:*:containers:*:*:* (string)

matchCriteriaId : 4B06D109-E327-4A2A-9FC9-A5F454022C0D (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:21.0.3:if011:*:*:containers:*:*:* (string)

matchCriteriaId : E67BEF93-133E-4507-B938-79D943AB82CF (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:traditional:*:*:* (string)

matchCriteriaId : 8C6D1E72-FC9F-4A0A-8E80-A3CA8CB0EDAA (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:22.0.1:-:*:*:containers:*:*:* (string)

matchCriteriaId : 69B77521-AF61-4711-9219-12D6DADB6F5F (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ibm:business_automation_workflow:22.0.1:if001:*:*:containers:*:*:* (string)

matchCriteriaId : E2AEA4BA-C309-4069-9226-B86C1B68F93C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : "IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, and 22.0.1 could disclose sensitive version information to authenticated users which could be used in further attacks against the system. IBM X-Force ID: 230537." (string)

}

1 : { »

lang : es (string)

value : "IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3 y 22.0.1 podrían revelar información confidencial de la versión a usuarios autenticados que podría usarse en futuros ataques contra el sistema. IBM X-Force ID: 230537." (string)

}

]

id : CVE-2022-35279 (string)

lastModified : 2024-11-21T07:11:01.907 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-11-03T20:15:28.853 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/pages/node/6829847 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/pages/node/6829847 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-312 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object