CVE-2022-22361: CSRF
First published: Fri May 27 2022(Updated: )
IBM Business Automation Workflow is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Business Automation Workflow | >=19.0.0.1<=19.0.0.3 | |
| IBM Business Automation Workflow | >=21.0.1<=21.0.3 | |
| IBM Business Automation Workflow | =18.0.0.0 | |
| IBM Business Automation Workflow | =18.0.0.1 | |
| IBM Business Automation Workflow | =20.0.0.1 | |
| IBM Business Automation Workflow | =20.0.0.2 | |
| IBM Business Process Manager | >=8.5.0.0<=8.5.0.201706 | |
| IBM Business Process Manager | >=8.6.0.0<=8.6.0.201803 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-22361?
The severity of CVE-2022-22361 is medium.
Which versions of IBM Business Automation Workflow are affected by CVE-2022-22361?
IBM Business Automation Workflow versions 18.0.0.0 through 18.0.0.1, 19.0.0.1 through 19.0.0.3, 20.0.0.1 through 20.0.0.2, and 21.0.1 through 21.0.3 are affected by CVE-2022-22361.
How can I fix CVE-2022-22361?
Apply the necessary patches and updates provided by IBM to fix CVE-2022-22361.
Where can I find more information about CVE-2022-22361?
You can find more information about CVE-2022-22361 on the IBM X-Force Exchange website and the IBM Support page.
What is the CWE ID of CVE-2022-22361?
The CWE ID of CVE-2022-22361 is 352.
- collector/ibm-support
- collector/nvd-index
- vendor/ibm
- canonical/ibm business automation workflow
- version/ibm business automation workflow/19.0.0.1
- version/ibm business automation workflow/19.0.0.3
- version/ibm business automation workflow/21.0.1
- version/ibm business automation workflow/21.0.3
- version/ibm business automation workflow/18.0.0.0
- version/ibm business automation workflow/18.0.0.1
- version/ibm business automation workflow/20.0.0.1
- version/ibm business automation workflow/20.0.0.2
- canonical/ibm business process manager
- version/ibm business process manager/8.5.0.0
- version/ibm business process manager/8.5.0.201706
- version/ibm business process manager/8.6.0.0
- version/ibm business process manager/8.6.0.201803