CVE-2016-0349: Medium severity ibm business process manager vulnerability
IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restrictions and update process-instance variables via a REST API call.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0349?
The severity of CVE-2016-0349 is considered to be high due to the ability of remote authenticated users to bypass access restrictions.
How do I fix CVE-2016-0349?
To fix CVE-2016-0349, update IBM Business Process Manager to version 8.5.7.CF201606 or later.
Who is affected by CVE-2016-0349?
CVE-2016-0349 affects users of IBM Business Process Manager versions 8.5.6 through 8.5.6.2 and version 8.5.7 before 8.5.7.CF201606.
What type of attack does CVE-2016-0349 enable?
CVE-2016-0349 enables remote authenticated users to update process-instance variables incorrectly, leading to unauthorized access.
Is CVE-2016-0349 related to REST API security?
Yes, CVE-2016-0349 is related to REST API security as it allows bypassing access controls through API calls.