CVE-2024-38321: IBM Business Automation Workflow information disclosure
IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations that could be read by an authenticated user. IBM X-Force ID: 284868.
Other sources
IBM Business Automation Workflow stores potentially sensitive information in log files under certain situations that could be read by an authenticated user.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38321?
CVE-2024-38321 has been classified as a moderate severity vulnerability due to the potential exposure of sensitive information to authenticated users.
Which versions of IBM Business Automation Workflow are affected by CVE-2024-38321?
CVE-2024-38321 affects IBM Business Automation Workflow versions 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, 23.0.2, and 24.0.0.
How do I fix CVE-2024-38321?
To address CVE-2024-38321, you should update your IBM Business Automation Workflow to a fixed version that is not susceptible to this vulnerability.
What kind of information is exposed in CVE-2024-38321?
CVE-2024-38321 involves the storage of potentially sensitive information in log files, which can be accessed by authenticated users.
Is user authentication required to exploit CVE-2024-38321?
Yes, exploitation of CVE-2024-38321 requires an authenticated user to access the potentially sensitive information stored in log files.