CVEvulnerability

CVE-2015-7455

3.1 LOW Published 2016-02-29 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-02-29
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 3.1 LOW — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected]): 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses: CWE-264

Description

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.

Affected configurations

• ibm websphere portal 7.0.0.0 • ibm websphere portal 7.0.0.1 • ibm websphere portal 7.0.0.2 • ibm websphere portal 8.0.0.0 • ibm websphere portal 8.0.0.1 • ibm websphere portal 8.5.0.0

Weakness · not in database (1)

CWE-264

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234 www-01.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg21975358 www.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234 www-01.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg21975358 www.ibm.com

CVE-2015-7455

Description

Affected configurations

Related

Weakness · not in database (1)

References