medium4.0
CVE-2014-4759
An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to ob…
Impact
An unspecified Ajax service in the Content Management toolkit in IBM Business Process Manager (BPM) 8.5.x through 8.5.5 allows remote authenticated users to obtain sensitive information by performing a document-attachment search and then reading document properties in the search results.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Business Process Manager | Versions 8.5.0.0, 8.5.0.1, 8.5.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871
- http://www-01.ibm.com/support/docview.wss?uid=swg21680809
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94486
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR50871
- http://www-01.ibm.com/support/docview.wss?uid=swg21680809
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94486