4
CVSSv2

CVE-2017-1766

Published: 30/03/2018 Updated: 09/10/2019
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm business process manager 8.5.7.0

ibm business process manager 8.5.6.0

ibm business process manager 8.5.6.2

ibm business process manager 8.5.6.1

ibm business process manager 8.5.5.0

ibm business process manager 8.6.0.0