Medium · 4.3 CVE-2017-1766 EUVD-2017-10782GHSA-5pcg-54j8-35rq

Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IB…

Published Mar 30, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Business Process Manager

Description

Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.

Affected products

Vendor	Product	Affected	Fixed
IBM	Business Process Manager	8.6, 8.6.0.CF201712	—

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/136151
http://www.ibm.com/support/docview.wss?uid=swg22011866