CVE-2017-1756 IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
LowCVSS 3.3
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm business process manager | = 7.5.0.0 | No fix listed |
| ibm business process manager | = 7.5.0.1 | No fix listed |
| ibm business process manager | = 7.5.1.0 | No fix listed |
| ibm business process manager | = 7.5.1.1 | No fix listed |
| ibm business process manager | = 7.5.1.2 | No fix listed |
| ibm business process manager | = 8.0.0.0 | No fix listed |
| ibm business process manager | = 8.0.1.0 | No fix listed |
| ibm business process manager | = 8.0.1.1 | No fix listed |
| ibm business process manager | = 8.0.1.2 | No fix listed |
| ibm business process manager | = 8.0.1.3 | No fix listed |
| ibm business process manager | = 8.5.0.0 | No fix listed |
| ibm business process manager | = 8.5.0.1 | No fix listed |
| ibm business process manager | = 8.5.0.2 | No fix listed |
| ibm business process manager | = 8.5.5.0 | No fix listed |
| ibm business process manager | = 8.5.6.0 | No fix listed |
| ibm business process manager | = 8.5.6.0-cf2 | No fix listed |
| ibm business process manager | = 8.5.6.1 | No fix listed |
| ibm business process manager | = 8.5.6.2 | No fix listed |
| ibm business process manager | = 8.5.7.0 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201606 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201609 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201612 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201703 | No fix listed |
| ibm business process manager | = 8.5.7.0-cf201706 | No fix listed |
| ibm business process manager | = 8.6.0.0 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm business process manager enterprise service bus | = 8.6.0.0 | No fix listed |
| ibm websphere | = 7.2.0.0 | No fix listed |
| ibm websphere | = 7.2.0.1 | No fix listed |
| ibm websphere | = 7.2.0.2 | No fix listed |
| ibm websphere | = 7.2.0.3 | No fix listed |
| ibm websphere | = 7.2.0.4 | No fix listed |
| ibm websphere | = 7.2.0.5 | No fix listed |
| ibm business process manager | = 8.6 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 103589 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry vendor-advisory