PT-2018-4421

CVE-2015-7463

·

Published

2018-03-15

·

Updated

2018-04-10

Description by

CVSS 2.0
5.5
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5.x through 8.5.6.0
Description The issue allows remote authenticated users to delete process and task data by leveraging incorrect authorization checks.
Recommendations For IBM Business Process Manager versions 7.5.x through 8.5.6.0, update to a version that includes the cumulative fix 2 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-285: Improper Authorization
Related identifiers
CVE-2015-7463
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com