PT-2016-1321

CVE-2015-7455

·

Published

2016-02-29

·

Updated

2016-03-02

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 7.0.0.2 CF29 IBM WebSphere Portal versions 8.0.x before 8.0.0.1 CF20 IBM WebSphere Portal versions 8.5.x before 8.5.0.0 CF09
Description The issue is related to insufficient access control in the user interface of the IBM WebSphere Portal server application. This can be exploited by a remote attacker to modify content items using the user interface.
Recommendations For versions 7.x through 7.0.0.2 CF29, update to a version after 7.0.0.2 CF29 to resolve the issue. For versions 8.0.x before 8.0.0.1 CF20, update to a version after 8.0.0.1 CF20 to resolve the issue. For versions 8.5.x before 8.5.0.0 CF09, update to a version after 8.5.0.0 CF09 to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾