Security Advisory

CVE-2014-6139

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-02-13 02:00:00

Last updated 2024-08-06 12:10:12

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance and process-instance searches by specifying a false value for the filterByCurrentUser parameter.

← Browse all CVEs View on cve.org ↗