CVE-2015-7454
21.03.2016, 14:59
Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | websphere_process_server | 6.1.2 |
| ibm | websphere_process_server | 6.1.2.1 |
| ibm | websphere_process_server | 6.1.2.2 |
| ibm | websphere_process_server | 6.1.2.3 |
| ibm | websphere_process_server | 6.2 |
| ibm | websphere_process_server | 6.2.0.1 |
| ibm | websphere_process_server | 6.2.0.2 |
| ibm | websphere_process_server | 6.2.0.3 |
| ibm | websphere_process_server | 7.0 |
| ibm | websphere_process_server | 7.0.0.1 |
| ibm | websphere_process_server | 7.0.0.2 |
| ibm | websphere_process_server | 7.0.0.3 |
| ibm | websphere_process_server | 7.0.0.4 |
| ibm | websphere_process_server | 7.0.0.5 |
| ibm | business_process_manager | 7.5.0.0 |
| ibm | business_process_manager | 7.5.0.1 |
| ibm | business_process_manager | 7.5.1.0 |
| ibm | business_process_manager | 7.5.1.1 |
| ibm | business_process_manager | 7.5.1.2 |
| ibm | business_process_manager | 8.0.0.0 |
| ibm | business_process_manager | 8.0.1.0 |
| ibm | business_process_manager | 8.0.1.1 |
| ibm | business_process_manager | 8.0.1.2 |
| ibm | business_process_manager | 8.0.1.3 |
| ibm | business_process_manager | 8.5.0.0 |
| ibm | business_process_manager | 8.5.0.1 |
| ibm | business_process_manager | 8.5.0.2 |
| ibm | business_process_manager | 8.5.5.0 |
| ibm | business_process_manager | 8.5.6.0 |
| ibm | business_process_manager | 8.5.6.1 |
| ibm | business_process_manager | 8.5.6.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References