Not rated
CVE-2015-7494 A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API
Description
A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Orchestrator 2.5 | 2.5 → 2.5.0.2 | No fix stated |
| Cloud Orchestrator 2.4 | 2.4 → 2.4.0.3 | No fix stated |
| Cloud Orchestrator 2.3 | 2.3 → 2.3.0.1 | No fix stated |
| Cloud Orchestrator 2.2 | 2.2 → 2.2.0.1 | No fix stated |
Other CVEs of Cloud Orchestrator
The 4 CVEs of Cloud Orchestrator →
CVE-2016-0202
A vulnerability has been identified in tasks, backend object generated for handling any action performed by the…
Not rated
CVE-2016-0203
A vulnerability has been identified in the IBM Cloud Orchestrator task API
Not rated
CVE-2016-0206
IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of…
Not rated