CVEvulnerability
CVE-2015-1905
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-07-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions on task-variable value changes via unspecified vectors.
Affected configurations
• ibm business process manager 7.5.0.0
• ibm business process manager 7.5.0.1
• ibm business process manager 7.5.1.0
• ibm business process manager 7.5.1.1
• ibm business process manager 7.5.1.2
• ibm business process manager 8.0.0.0
• ibm business process manager 8.0.1.0
• ibm business process manager 8.0.1.1
• ibm business process manager 8.0.1.2
• ibm business process manager 8.0.1.3
• ibm business process manager 8.5.0.0
• ibm business process manager 8.5.0.1
• ibm business process manager 8.5.6.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21700717 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75977 www.securityfocus.com
- http://www.securitytracker.com/id/1033002 www.securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21700717 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/75977 www.securityfocus.com
- http://www.securitytracker.com/id/1033002 www.securitytracker.com