Vulnerability Bulletins |
IBM Security Bulletin: File path traversal vulnerability in IBM Business Process Manager (BPM) and WebSphere Lombardi Edition (WLE) (CVE-2015-1884) |
|
| Affected software | IBM |
|
IBM Business Proccess Manager and WebSphere Lombardi Edition are vulnerable to file path traversal. Due to insufficient input parameter validation files can be downloaded by authenticated attackers using specially crafted URLs. CVE(s): CVE-2015-1884 Affected product(s) and affected version(s): IBM Business Process Manager Standard V7.5.x through V8.5.5.0 IBM Business Process Manager Express V7.5.x through V8.5.5.0 IBM Business Process Manager Advanced V7.5.x through V8.5.5.0 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_file_path_traversal_vulnerability_in_ibm_business_process_manager_bpm_and_websphere_lombardi_edition_wle_cve_2015_1884?lang=en_us |
|