CVE-2014-4802: Medium severity ibm business process manager vulnerability
The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager (BPM) 8.0 through 8.5.5 does not properly restrict task and instance listings in result sets, which allows remote authenticated users to bypass authorization checks and obtain sensitive information by executing a saved search.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4802?
CVE-2014-4802 has a medium severity rating due to its potential to expose sensitive information.
How do I fix CVE-2014-4802?
To fix CVE-2014-4802, apply the appropriate IBM Business Process Manager updates or patches that address this vulnerability.
Who is affected by CVE-2014-4802?
CVE-2014-4802 affects users of IBM Business Process Manager versions 8.0 through 8.5.5.
What type of vulnerability is CVE-2014-4802?
CVE-2014-4802 is an authentication bypass vulnerability that allows unauthorized access to sensitive task and instance listings.
Can CVE-2014-4802 be exploited remotely?
Yes, CVE-2014-4802 can be exploited remotely by authenticated users to access unauthorized data.