CVE-2017-1766

published 2018-03-30

CVE-2017-1766: Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.

medium 4.3 CVSS 3.0

AV N AC L PR L UI N S U C N I L A N

Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—
ibm	business_process_manager	—	—

CWE-863