CVE-2015-7454: Medium severity ibm websphere process server vulnerability
Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7454?
CVE-2015-7454 is rated as a medium severity vulnerability.
How do I fix CVE-2015-7454?
To fix CVE-2015-7454, apply the latest patches provided by IBM for the affected versions of WebSphere Process Server and Business Process Manager.
Which versions are affected by CVE-2015-7454?
CVE-2015-7454 affects IBM WebSphere Process Server versions 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced versions 7.5.x through 8.5.6.2.
What kind of access does CVE-2015-7454 allow attackers?
CVE-2015-7454 allows remote authenticated users to bypass intended access restrictions, potentially leading to unauthorized actions within the application.
Is CVE-2015-7454 a remote or local vulnerability?
CVE-2015-7454 is classified as a remote vulnerability, as it can be exploited by authenticated users accessing the system over the network.