CVE-2020-4794

—

CVSS 3.1

5.4 medium

EPSS

<1%p56

Published

Dec 21, 2020 (Dec 21, 2020)

Modified

Jun 17, 2026

Description

IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.

Vendors: ibm
Products: automation workstream services, business process manager, business automation workflow
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.