CVE-2021-20306CWE-863

A flaw was found in the BPMN editor in version jBPM 7.51.0.Final

published June 1, 2021

CVSS
—
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00655 · 50.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-06-01T13:38Z
EPSS history
Timeline
  • 01 JUN 13:38Z
    A flaw was found in the BPMN editor in version jBPM 7.51.0.Final
    cvelistv5