Beveiligingsadvies

CVE-2014-6139

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-02-13 02:00:00
Laatst bijgewerkt 2024-08-06 12:10:12
Toegewezen door ibm
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance and process-instance searches by specifying a false value for the filterByCurrentUser parameter.