CVE-2021-20306 | BDVDB-2026-154571 Detail

Business-central

Description#

A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-863 Incorrect Authorization

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1946213

Exploit#

No public exploit known

History#

Version 12021-06-01Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.