CVE-2008-0402

IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 - Authenticated Unauthorized Repository Resource Deletion

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members of the repository's owning group.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39830
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28586
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/search.wss?rs=0&q=JR28175&apar=only
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0254
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019252
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27389

Scores

EPSS 0.0117
EPSS Percentile 64.3%

Details

CWE
CWE-264
Status published
Products (1)
ibm/websphere_business_modeler 6.0.2_1 (2 CPE variants)
Published Jan 23, 2008
Tracked Since Feb 18, 2026