CVE-2015-7441

Loading...

General

Score:4.9/10.0
Severity:Low
Category:Implementation Error

Impact Metrics

Confidentiality:Partial
Integrity:Partial
Availability:None

Exploitability Metrics

Access Vector:Network
Access Complexity:Medium
Authentication:Single

Published on 01/01/16 - Updated on 07/12/16

Description

Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

Category: Implementation Error

CWE-17 (Code)
Weaknesses in this category are typically introduced during code development, including specification, design, and implementation.

Security Notices

US National Vulnerability DatabaseCVE-2015-7441

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
ibmbusiness_process_manager
ibmwebsphere_process_server

Share this vulnerability with:

Twitter Facebook LinkedIn Mail