CVEvulnerability

CVE-2015-7454

4.3 MEDIUM Published 2016-03-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-03-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-264

Description

Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.

Affected configurations

• ibm websphere process server 6.1.2 • ibm websphere process server 6.1.2.1 • ibm websphere process server 6.1.2.2 • ibm websphere process server 6.1.2.3 • ibm websphere process server 6.2 • ibm websphere process server 6.2.0.1 • ibm websphere process server 6.2.0.2 • ibm websphere process server 6.2.0.3 • ibm websphere process server 7.0 • ibm websphere process server 7.0.0.1 • ibm websphere process server 7.0.0.2 • ibm websphere process server 7.0.0.3 • ibm websphere process server 7.0.0.4 • ibm websphere process server 7.0.0.5 • ibm business process manager 7.5.0.0 • ibm business process manager 7.5.0.1 • ibm business process manager 7.5.1.0 • ibm business process manager 7.5.1.1 • ibm business process manager 7.5.1.2 • ibm business process manager 8.0.0.0 • ibm business process manager 8.0.1.0 • ibm business process manager 8.0.1.1 • ibm business process manager 8.0.1.2 • ibm business process manager 8.0.1.3 • ibm business process manager 8.5.0.0 • ibm business process manager 8.5.0.1 • ibm business process manager 8.5.0.2 • ibm business process manager 8.5.5.0 • ibm business process manager 8.5.6.0 • ibm business process manager 8.5.6.1 • ibm business process manager 8.5.6.2

Related

Weakness · not in database (1)

References