Non notée
CVE-2015-7494 A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API
Description
A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Orchestrator 2.5 | 2.5 → 2.5.0.2 | Pas de correctif indiqué |
| Cloud Orchestrator 2.4 | 2.4 → 2.4.0.3 | Pas de correctif indiqué |
| Cloud Orchestrator 2.3 | 2.3 → 2.3.0.1 | Pas de correctif indiqué |
| Cloud Orchestrator 2.2 | 2.2 → 2.2.0.1 | Pas de correctif indiqué |
Autres CVE de Cloud Orchestrator
Les 4 CVE de Cloud Orchestrator →
CVE-2016-0202
A vulnerability has been identified in tasks, backend object generated for handling any action performed by the…
Non notée
CVE-2016-0203
A vulnerability has been identified in the IBM Cloud Orchestrator task API
Non notée
CVE-2016-0206
IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of…
Non notée