Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3qv-75j5-j7h2

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.

Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.

EPSS

Процентиль: 37%
0.0016
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
почти 10 лет назад

Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.

fstec
почти 10 лет назад

Уязвимость системы автоматизации деятельности предприятия Business Process Manager и сервера бизнес-процессов WebSphere Process Server, позволяющая нарушителю обойти существующие ограничения доступа и создать произвольную страницу

EPSS

Процентиль: 37%
0.0016
Низкий

4.3 Medium

CVSS3