Description
Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1035319
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/85089
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21972005
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1JR54678
Scores
CVSS v3
4.3
EPSS
0.0131
EPSS Percentile
67.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Details
CWE
CWE-264
Status
published
Products (31)
ibm/business_process_manager
7.5.0.0
ibm/business_process_manager
7.5.0.1
ibm/business_process_manager
7.5.1.0
ibm/business_process_manager
7.5.1.1
ibm/business_process_manager
7.5.1.2
ibm/business_process_manager
8.0.0.0
ibm/business_process_manager
8.0.1.0
ibm/business_process_manager
8.0.1.1
ibm/business_process_manager
8.0.1.2
ibm/business_process_manager
8.0.1.3
... and 21 more
Published
Mar 21, 2016
Tracked Since
Feb 18, 2026