Not rated
CVE-2017-1539 IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing…
Description
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Process Manager Advanced 8.5 | 8.5 → 8.5.7 | No fix stated |
| Business Process Manager Advanced 8.0 | 8.0 → 8.0.1.3 | No fix stated |
| Business Process Manager Advanced 7.5 | 7.5 → 7.5.1.2 | No fix stated |
Other CVEs of Business Process Manager Advanced
The 9 CVEs of Business Process Manager Advanced →
CVE-2020-4490
IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote…
5.3
Medium
CVE-2017-1494
IBM Business Process Manager 8.5 is vulnerable to cross-site scripting
Not rated
CVE-2017-1425
IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting
Not rated
CVE-2017-1527
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when…
Not rated