PT-2018-4421 · Ibm · Ibm Business Process Manager

Publicado 2018-03-15 · Atualizado 2018-04-10 · CVE-2015-7463

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5.x through 8.5.6.0

Description The issue allows remote authenticated users to delete process and task data by leveraging incorrect authorization checks.

Recommendations For IBM Business Process Manager versions 7.5.x through 8.5.6.0, update to a version that includes the cumulative fix 2 or later to resolve the issue.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2015-7463

Produtos afetados

Ibm Business Process Manager

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21973442 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108393 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7463 · Nota de Segurança