CVE-2025-1495CWE-306

IBM Business Automation Workflow missing authentication

Medium · published May 3, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

IBM Business Automation Workflow 24.0.0 and 24.0.1 through 24.0.1 IF001 Center may leak sensitive information due to missing authorization validation.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-05-03T16:53Z
EPSS history
Timeline
  • 03 MAY 16:53Z
    IBM Business Automation Workflow missing authentication
    cvelistv5