Unscored CVE-2017-1628 EUVD-2017-10644GHSA-f6qw-56hq-m3w6

IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect a…

Published Nov 27, 2017 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Business Process Manager

Description

IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks.

Affected products

Vendor	Product	Affected	Fixed
IBM	Business Process Manager	8.6.0.0	—

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/133126
101900 vdb-entry
http://www.ibm.com/support/docview.wss?uid=swg22009496
1039777 vdb-entry