{"id":"CVE-2020-4794","aliases":["EUVD-2020-26041","GHSA-jq8v-8c7p-26p2"],"status":"published","title":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0,...","description":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.","severity":{"version":"3.0","score":5.4,"vector":"CVSS:3.0/A:L/I:N/C:L/AC:L/PR:L/S:U/AV:N/UI:N/RC:C/E:U/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00849,"percentile":0.58386,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2020-12-21T17:50:30Z","modified":"2026-06-17T03:20:29Z","products":[{"vendor":"ibm","product":"automation workstream services"},{"vendor":"ibm","product":"automation_workstream_services"},{"vendor":"ibm","product":"business automation workflow"},{"vendor":"ibm","product":"business process manager"},{"vendor":"ibm","product":"business_automation_workflow"},{"vendor":"ibm","product":"business_process_manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6359463","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/189445","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4794"},{"url":"https://github.com/advisories/GHSA-jq8v-8c7p-26p2"}],"sources":{"cve":[{"id":"CVE-2020-4794","description":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.","status":"published","published":"2020-12-21T17:50:30.68Z","modified":"2024-09-16T18:43:25.778Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/A:L/I:N/C:L/AC:L/PR:L/S:U/AV:N/UI:N/RC:C/E:U/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:56.213477Z"}],"euvd":[{"id":"EUVD-2020-26041","description":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.","status":"published","published":"2020-12-21T17:50:30Z","modified":"2024-09-16T18:43:25Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/A:L/I:N/C:L/AC:L/PR:L/S:U/AV:N/UI:N/RC:C/E:U/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:55:30.209098Z"}],"ghsa":[{"id":"GHSA-jq8v-8c7p-26p2","title":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0,...","description":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.","status":"published","published":"2022-05-24T17:37:11Z","modified":"2023-01-29T05:04:49Z","cwes":["CWE-863"],"updated_at":"2026-11-02T14:45:38.830072Z"}],"nvd":[{"id":"CVE-2020-4794","description":"IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.6 could allow an authenticated user to obtain sensitive information or cuase a denial of service due to iimproper authorization checking. IBM X-Force ID: 189445.","status":"published","published":"2020-12-21T18:15:16.04Z","modified":"2026-06-17T03:20:29.713Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"primary"},{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:06:27.73474Z"}]}}