Volerion logoVolerion
Volerion logoVolerion

IBM Business Automation Workflow Database Structure Information Disclosure Vulnerability

Vulnerability

An information disclosure vulnerability has been identified in IBM Business Automation Workflow, both in containerized and traditional deployments. This vulnerability may leak details about the application's database structure through error messages. It affects versions 24.0.0, 24.0.1, 25.0.0, and 25.0.1.

Impact

Exposing database structure information can aid attackers in crafting more effective exploitation strategies or in understanding the application's data management, potentially leading to further vulnerabilities or data manipulation.

Remediation

Users are advised to upgrade to IBM Business Automation Workflow version 25.0.1 or version 24.0.1. If using version 25.0.0, upgrade to 25.0.0-IF004. For version 24.0.0, upgrade to 24.0.0-IF009.

Added: May 28, 2026, 5:00 AM
Updated: May 28, 2026, 5:00 AM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
0.6
exploitability
5.2
remediation
7.7
relevance
9.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.