Security Advisory

CVE-2015-1904

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-08-01 01:00:00

Last updated 2024-08-06 04:54:16

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management (ECM) integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypass intended document-access restrictions via a (1) upload or (2) download action.

← Browse all CVEs View on cve.org ↗