Miembros de
Boletines de Vulnerabilidades |
IBM Security Bulletin: Incorrect authorization for update of process instance variables in IBM Business Process Manager (CVE-2016-0349) |
|
| Software afectado | IBM |
|
Due to incorrect authorization for update of process instance variables, users without required permission can update process instance variables in IBM Business Process Manager.CVE(s): CVE-2016-0349Affected product(s) and affected version(s):IBM Business Process Manager V8.5.7 IBM Business Process Manager V8.5.6 through V8.5.6.0 cumulative fix 2Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-incorrect-authorization-for-update-of-process-instance-variables-in-ibm-business-process-manager-cve-2016-0349/ |
|
