4

CVE-2015-1905

The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions on task-variable value changes via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Business Process Manager Version 7.5.0.0
Ibm ≫ Business Process Manager Version 7.5.0.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.0.0 SwEdition express
Ibm ≫ Business Process Manager Version 7.5.0.0 SwEdition standard
Ibm ≫ Business Process Manager Version 7.5.0.1
Ibm ≫ Business Process Manager Version 7.5.0.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.0.1 SwEdition express
Ibm ≫ Business Process Manager Version 7.5.0.1 SwEdition standard
Ibm ≫ Business Process Manager Version 7.5.1.0
Ibm ≫ Business Process Manager Version 7.5.1.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.1.0 SwEdition express
Ibm ≫ Business Process Manager Version 7.5.1.0 SwEdition standard
Ibm ≫ Business Process Manager Version 7.5.1.1
Ibm ≫ Business Process Manager Version 7.5.1.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.1.1 SwEdition express
Ibm ≫ Business Process Manager Version 7.5.1.1 SwEdition standard
Ibm ≫ Business Process Manager Version 7.5.1.2
Ibm ≫ Business Process Manager Version 7.5.1.2 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.1.2 SwEdition express
Ibm ≫ Business Process Manager Version 7.5.1.2 SwEdition standard
Ibm ≫ Business Process Manager Version 8.0.0.0
Ibm ≫ Business Process Manager Version 8.0.0.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.0.0 SwEdition express
Ibm ≫ Business Process Manager Version 8.0.0.0 SwEdition standard
Ibm ≫ Business Process Manager Version 8.0.1.0
Ibm ≫ Business Process Manager Version 8.0.1.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.0 SwEdition express
Ibm ≫ Business Process Manager Version 8.0.1.0 SwEdition standard
Ibm ≫ Business Process Manager Version 8.0.1.1
Ibm ≫ Business Process Manager Version 8.0.1.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.1 SwEdition express
Ibm ≫ Business Process Manager Version 8.0.1.1 SwEdition standard
Ibm ≫ Business Process Manager Version 8.0.1.2
Ibm ≫ Business Process Manager Version 8.0.1.2 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.2 SwEdition express
Ibm ≫ Business Process Manager Version 8.0.1.2 SwEdition standard
Ibm ≫ Business Process Manager Version 8.0.1.3 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.3 SwEdition express
Ibm ≫ Business Process Manager Version 8.0.1.3 SwEdition standard
Ibm ≫ Business Process Manager Version 8.5.0.0
Ibm ≫ Business Process Manager Version 8.5.0.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.0.0 SwEdition express
Ibm ≫ Business Process Manager Version 8.5.0.0 SwEdition standard
Ibm ≫ Business Process Manager Version 8.5.0.1
Ibm ≫ Business Process Manager Version 8.5.0.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.0.1 SwEdition express
Ibm ≫ Business Process Manager Version 8.5.0.1 SwEdition standard
Ibm ≫ Business Process Manager Version 8.5.6.0
Ibm ≫ Business Process Manager Version 8.5.6.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.6.0 SwEdition express
Ibm ≫ Business Process Manager Version 8.5.6.0 SwEdition standard
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.49% 0.709
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21700717
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75977
http://www.securitytracker.com/id/1033002