CVE-2017-1766 MEDIUM

CVE-2017-1766

Vendor Ibm
Product Business Process Manager
Published March 30, 2018
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N

What the vulnerability does

01Description

Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.

Key dates

02Disclosure timeline

March 30, 2018 CVE published
September 16, 2024 Record updated