CVE-2014-4758 in Business Process Manager
要約 (英語)
IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
予約する
2014年07月09日
公開
2014年09月04日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 70801 | IBM Business Process Manager Access Restriction 特権昇格 | 264 | 未実証 | 公式な修正 | CVE-2014-4758 |