medium6.5
CVE-2016-0349
IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and…
Impact
IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and update process-instance variables via a REST API call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Business Process Manager | Versions 8.5.6.0, 8.5.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR55701
- http://www-01.ibm.com/support/docview.wss?uid=swg21981094
- http://www.securitytracker.com/id/1036185
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR55701
- http://www-01.ibm.com/support/docview.wss?uid=swg21981094
- http://www.securitytracker.com/id/1036185