PT-2018-4421 · Ibm · Ibm Business Process Manager

Published 2018-03-15 · Updated 2018-04-10 · CVE-2015-7463

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5.x through 8.5.6.0

Description The issue allows remote authenticated users to delete process and task data by leveraging incorrect authorization checks.

Recommendations For IBM Business Process Manager versions 7.5.x through 8.5.6.0, update to a version that includes the cumulative fix 2 or later to resolve the issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2015-7463

Affected Products

Ibm Business Process Manager

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21973442 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7463 · Security Note