medium4.0

CVE-2017-1756

IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system.

Impact

IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.

Vendor	Product	Affected versions
Ibm	Business Process Manager	Versions 7.5.0.0, 7.5.0.1, 7.5.1.0, 7.5.1.1, 7.5.1.2, 8.0.0.0
Ibm	Business Process Manager Enterprise Service Bus	Version 8.6.0.0
Ibm	Websphere	Versions 7.2.0.0, 7.2.0.1, 7.2.0.2, 7.2.0.3, 7.2.0.4, 7.2.0.5