CVEvulnerability

CVE-2015-0141

4.0 MEDIUM Published 2015-10-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-10-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-284

Description

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary user filters via a JSON request.

Affected configurations

• ibm openpages grc platform 6.2.0.0 • ibm openpages grc platform 6.2.1.0 • ibm openpages grc platform 6.2.1.1 • ibm openpages grc platform 7.0.0.0 • ibm openpages grc platform 7.1.0.0

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References