Boletines de Vulnerabilidades |
IBM Security Bulletin: Information disclosure in IBM Business Process Manager (BPM) V8.5 document attachments search (CVE-2014-4759) |
|
| Software afectado | IBM |
|
IBM BPM document attachment queries can return document properties that contain sensitive information. CVE(s): CVE-2014-4759 Affected product(s) and affected version(s): IBM Business Process Manager Standard V8.5.x IBM Business Process Manager Express V8.5.x IBM Business Process Manager Advanced V8.5.x Note. The query feature is only available for customers with the IBM BPM document store feature configured. This feature is configured, by default, unless one of the following More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_information_disclosure_in_ibm_business_process_manager_bpm_v8_5_document_attachments_search_cve_2014_4759?lang=en_us |
|














