Bypassing Access Restrictions in IBM Business Process Manager Import/Export Functionality

Bypassing Access Restrictions in IBM Business Process Manager Import/Export Functionality

CVE-2014-4844 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

The import/export functionality in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5 allows remote authenticated users to bypass intended access restrictions via a project action for a (1) process application or (2) toolkit.

Learn more about our Cis Benchmark Audit For Ibm I.