{"id":"CVE-2021-29751","aliases":["EUVD-2021-16225","GHSA-5w9g-vrj4-xwgh"],"status":"published","title":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8...","description":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.","severity":{"version":"3.0","score":3.1,"vector":"CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0085,"percentile":0.58416,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2021-06-28T15:55:25Z","modified":"2026-06-17T03:48:14Z","products":[{"vendor":"ibm","product":"business automation workflow"},{"vendor":"ibm","product":"business process manager"},{"vendor":"ibm","product":"business_automation_workflow"},{"vendor":"ibm","product":"business_process_manager"},{"vendor":"ibm","product":"cloud pak for automation"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6465127","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/6467055","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/201779","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29751"},{"url":"https://github.com/advisories/GHSA-5w9g-vrj4-xwgh"}],"sources":{"cve":[{"id":"CVE-2021-29751","description":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.","status":"published","published":"2021-06-28T15:55:25.283Z","modified":"2024-09-17T02:47:11.003Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:33:06.658806Z"}],"euvd":[{"id":"EUVD-2021-16225","description":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.","status":"published","published":"2021-06-28T15:55:25Z","modified":"2024-09-17T02:47:11Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/C:L/UI:N/S:U/AV:N/PR:L/I:N/AC:H/A:N/E:U/RL:O/RC:C","level":"low"}],"updated_at":"2026-11-03T00:28:37.375568Z"}],"ghsa":[{"id":"GHSA-5w9g-vrj4-xwgh","title":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8...","description":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.","status":"published","published":"2022-05-24T19:06:23Z","modified":"2023-01-27T05:02:59Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:42:09.126228Z"}],"nvd":[{"id":"CVE-2021-29751","description":"IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.","status":"published","published":"2021-06-28T16:15:08.43Z","modified":"2026-06-17T03:48:14.127Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:06:55.259633Z"}]}}