CVE-2014-4758

Опубликовано: 04 сент. 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.2:*:lombardi:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.2.0.1:-:lombardi:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.2.0.2:-:lombardi:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.2.0.3:-:lombardi:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.2.0.4:-:lombardi:*:*:*:*:*

cpe:2.3:a:ibm:websphere_application_server:7.2.0.5:-:lombardi:*:*:*:*:*

EPSS

Процентиль: 62%

0.01107

Низкий

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-2vqr-3j4p-r5j5

github

около 4 лет назад