CVE:CVE-2020-4794
CNNVD:CNNVD-202012-1411
IBM Business Process Manager（BPM）等都是美国IBM公司的产品。IBM Business Process Manager是一套综合的业务流程管理平台。IBM Business Automation Workflow是一套工作流程自动化解决方案。IBM Process Federation Server Component是一个IBM BPM 环境的可选组件。
IBM Process Federation Server Component, IBM Business Automation Workflow and IBM Business Process Manager 存在授权问题漏洞，该漏洞源于允许经过身份验证的用户获得敏感信息，或由于不适当的授权检查而导致拒绝服务。
solution:Upgrade ibm automation_workstream_services to a higher version than 19.0.3,20.0.1,20.0.2,and avoid the version 19.0.3,20.0.1,20.0.2; Upgrade ibm business_process_manager to a higher version than 8.0.0.0,8.0.1.0,8.0.1.1,8.0.1.2,8.0.1.3,8.5.0.0,8.5.0.1,8.5.0.2,8.5.5.0,8.5.6.0,8.5.6.1,8.5.6.2,8.5.7.0,8.5.7.0:cf201606,8.5.7.0:cf201609,8.5.7.0:cf201612,8.5.7.0:cf201703,8.5.7.0:cf201706,8.6,and avoid the version 8.0.0.0,8.0.1.0,8.0.1.1,8.0.1.2,8.0.1.3,8.5.0.0,8.5.0.1,8.5.0.2,8.5.5.0,8.5.6.0,8.5.6.1,8.5.6.2,8.5.7.0,8.5.7.0:cf201606,8.5.7.0:cf201609,8.5.7.0:cf201612,8.5.7.0:cf201703,8.5.7.0:cf201706,8.6; Upgrade ibm business_automation_workflow to a higher version than 18.0.0.0,18.0.0.1,18.0.0.2,19.0.0.0,19.0.0.1,19.0.0.2,19.0.0.3,20.0.0.0,20.0.0.1,20.0.2.0,and avoid the version 18.0.0.0,18.0.0.1,18.0.0.2,19.0.0.0,19.0.0.1,19.0.0.2,19.0.0.3,20.0.0.0,20.0.0.1,20.0.2.0