CVE-2014-4758

Publication date

2014-09-04 10:00:00

Family

ibm

State

PUBLISHED

Description

IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.