4.3

CVE-2015-7454

Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Process Server Version 6.1.2
Ibm ≫ Websphere Process Server Version 6.1.2.1
Ibm ≫ Websphere Process Server Version 6.1.2.2
Ibm ≫ Websphere Process Server Version 6.1.2.3
Ibm ≫ Websphere Process Server Version 6.2
Ibm ≫ Websphere Process Server Version 6.2.0.1
Ibm ≫ Websphere Process Server Version 6.2.0.2
Ibm ≫ Websphere Process Server Version 6.2.0.3
Ibm ≫ Websphere Process Server Version 7.0
Ibm ≫ Websphere Process Server Version 7.0.0.1
Ibm ≫ Websphere Process Server Version 7.0.0.2
Ibm ≫ Websphere Process Server Version 7.0.0.3
Ibm ≫ Websphere Process Server Version 7.0.0.4
Ibm ≫ Websphere Process Server Version 7.0.0.5
Ibm ≫ Business Process Manager Version 7.5.0.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.0.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.1.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.1.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 7.5.1.2 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.0.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.2 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.0.1.3 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.0.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.0.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.0.2 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.5.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.6.0 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.6.1 SwEdition advanced
Ibm ≫ Business Process Manager Version 8.5.6.2 SwEdition advanced
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.67
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1035319
http://www-01.ibm.com/support/docview.wss?uid=swg1JR54678
http://www-01.ibm.com/support/docview.wss?uid=swg21972005
Patch
Vendor Advisory
http://www.securityfocus.com/bid/85089