CVE-2014-4758
Published Sep 4, 2014
Last updated 7 years ago
Overview
- Description
- IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
- Source
- psirt@us.ibm.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42264DE4-CEED-4FA5-8C77-82BF9A55F3F2"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5E78ECD-6FFA-4AA0-B8B4-F9C002D6F8EF"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAC02B89-813E-4B3D-B518-6565BE06C575"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06DFA125-9D52-4C16-9946-DB8D43700415"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "613CC0CD-083E-439A-9A53-777E69CDE2DE"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "161542A0-E919-4105-AD4F-C881ACF8D26B"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF8D1DC9-CB5E-4627-8689-B5FA7C5DE1C5"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32504DEB-7391-4452-BA2E-409959B24222"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8F74820-DF10-499E-AF7A-93AC285843D1"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "989C89DF-C6CB-45C9-9592-30A83896BD71"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "783C2592-9669-4C75-9E63-C834482F6F8A"
},
{
"criteria": "cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7021B830-3EE4-446D-8D87-BBD2097A023E"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2:*:lombardi:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B11A8D3-D342-4582-8FD7-4BFA1EF66EFC"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.1:-:lombardi:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43AA94DF-8CC0-494B-952C-F094655DB574"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.2:-:lombardi:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50F506E3-8675-49D1-9F43-714198F1411C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.3:-:lombardi:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A432B45B-1C04-4A34-8851-4DF731189747"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.4:-:lombardi:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6252B7F5-5B89-4FEF-9D33-DB92BEB917A6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_application_server:7.2.0.5:-:lombardi:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6647BB05-AAC7-4D0D-90DD-C3294D3CE3D9"
}
],
"operator": "OR"
}
]
}
]