IBM Business Automation Workflow 18.0.0.0/18.0.0.1/18.0.0.2 HTTP Request information disclosure

Summaryinfo

A vulnerability was found in IBM Business Automation Workflow 18.0.0.0/18.0.0.1/18.0.0.2. It has been classified as problematic. This vulnerability affects unknown code. The manipulation as part of HTTP Request leads to information disclosure. This vulnerability is listed as CVE-2018-1885. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in IBM Business Automation Workflow 18.0.0.0/18.0.0.1/18.0.0.2 (Automation Software). This issue affects an unknown code block. The manipulation as part of a HTTP Request leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. The summary by CVE is:

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.

The bug was discovered 04/04/2019. The weakness was presented 04/08/2019 (Website). It is possible to read the advisory at exchange.xforce.ibmcloud.com. The identification of this vulnerability is CVE-2018-1885 since 12/13/2017. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/27/2023). It is expected to see the exploit prices for this product increasing in the near future.The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 4 days. During that time the estimated underground price was around $5k-$25k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-133107 for similar entry. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Automation Software

Vendor

• IBM

Name

• Business Automation Workflow

Version

• 18.0.0.0
• 18.0.0.1
• 18.0.0.2

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion