4
CVE-2014-4802
- EPSS 0.16%
- Veröffentlicht 07.10.2014 10:55:04
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle psirt@us.ibm.com
- Teams Watchlist Login
- Unerledigt Login
The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager (BPM) 8.0 through 8.5.5 does not properly restrict task and instance listings in result sets, which allows remote authenticated users to bypass authorization checks and obtain sensitive information by executing a saved search.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Business Process Manager Version8.0.0.0
Ibm ≫ Business Process Manager Version8.0.1.0
Ibm ≫ Business Process Manager Version8.0.1.1
Ibm ≫ Business Process Manager Version8.0.1.2
Ibm ≫ Business Process Manager Version8.0.1.3
Ibm ≫ Business Process Manager Version8.5.0.0
Ibm ≫ Business Process Manager Version8.5.0.1
Ibm ≫ Business Process Manager Version8.5.5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.333 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|