CVE-2015-7463

IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete process and task data by leveraging incorrect authorization checks. IBM X-Force ID: 108393.

Score

CVSS 3.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-03-15

Last modified

2024-08-06

Weaknesses

CWE-285

Affected products

• Business Process Manager (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21973442
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108393