The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions on task-variable value changes via unspecified vectors.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions on task-variable value changes via unspecified vectors.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/75977 | vdb-entry x_refsource_BID |
| http://www-01.ibm.com/support/docview.wss?uid=swg21700717 | x_refsource_CONFIRM |
| http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 | vendor-advisory x_refsource_AIXAPAR |
| http://www.securitytracker.com/id/1033002 | vdb-entry x_refsource_SECTRACK |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/75977 | vdb-entry x_refsource_BID x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg21700717 | x_refsource_CONFIRM x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| http://www.securitytracker.com/id/1033002 | vdb-entry x_refsource_SECTRACK x_transferred |
The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions on task-variable value changes via unspecified vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.0 | MEDIUM | AV:N/AC:L/Au:S/C:N/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 | psirt@us.ibm.com | Patch Vendor Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg21700717 | psirt@us.ibm.com | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/75977 | psirt@us.ibm.com | N/A |
| http://www.securitytracker.com/id/1033002 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1JR52772 | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg21700717 | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/75977 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securitytracker.com/id/1033002 | af854a3a-2127-422b-91ae-364da2661108 | N/A |