low3.5
CVE-2015-1904
IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Con…
Impact
IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management (ECM) integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypass intended document-access restrictions via a (1) upload or (2) download action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Business Process Manager | Versions 8.0.0.0, 8.0.1.0, 8.0.1.1, 8.0.1.2, 8.0.1.3, 8.5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR53209
- http://www-01.ibm.com/support/docview.wss?uid=swg21960293
- http://www.securitytracker.com/id/1033159
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR53209
- http://www-01.ibm.com/support/docview.wss?uid=swg21960293
- http://www.securitytracker.com/id/1033159