Lucene search

[email protected]CVE-2015-7441

HistoryJan 01, 2016 - 12:59 a.m.

CVE-2015-7441

2016-01-0100:59:00

CWE-17

[email protected]

web.nvd.nist.gov

cve-2015-7441

ssl vulnerability

ibm websphere process server

remote artifact loader

ral

nvd

information security

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

Affected configurations

NVD

Node

ibmbusiness_process_managerMatch7.5.0.0advanced

ibmbusiness_process_managerMatch7.5.0.0express

ibmbusiness_process_managerMatch7.5.0.0standard

ibmbusiness_process_managerMatch7.5.0.1

ibmbusiness_process_managerMatch7.5.0.1advanced

ibmbusiness_process_managerMatch7.5.0.1express

ibmbusiness_process_managerMatch7.5.0.1standard

ibmbusiness_process_managerMatch7.5.1.0

ibmbusiness_process_managerMatch7.5.1.0advanced

ibmbusiness_process_managerMatch7.5.1.0express

ibmbusiness_process_managerMatch7.5.1.0standard

ibmbusiness_process_managerMatch7.5.1.1

ibmbusiness_process_managerMatch7.5.1.1advanced

ibmbusiness_process_managerMatch7.5.1.1express

ibmbusiness_process_managerMatch7.5.1.1standard

ibmbusiness_process_managerMatch7.5.1.2

ibmbusiness_process_managerMatch7.5.1.2advanced

ibmbusiness_process_managerMatch7.5.1.2express

ibmbusiness_process_managerMatch7.5.1.2standard

ibmbusiness_process_managerMatch8.0.0.0

ibmbusiness_process_managerMatch8.0.0.0advanced

ibmbusiness_process_managerMatch8.0.0.0express

ibmbusiness_process_managerMatch8.0.0.0standard

ibmbusiness_process_managerMatch8.0.1.0

ibmbusiness_process_managerMatch8.0.1.0advanced

ibmbusiness_process_managerMatch8.0.1.0express

ibmbusiness_process_managerMatch8.0.1.0standard

ibmbusiness_process_managerMatch8.0.1.1

ibmbusiness_process_managerMatch8.0.1.1advanced

ibmbusiness_process_managerMatch8.0.1.1express

ibmbusiness_process_managerMatch8.0.1.1standard

ibmbusiness_process_managerMatch8.0.1.2

ibmbusiness_process_managerMatch8.0.1.2advanced

ibmbusiness_process_managerMatch8.0.1.2express

ibmbusiness_process_managerMatch8.0.1.2standard

ibmbusiness_process_managerMatch8.0.1.3advanced

ibmbusiness_process_managerMatch8.0.1.3express

ibmbusiness_process_managerMatch8.0.1.3standard

ibmbusiness_process_managerMatch8.5.0.0

ibmbusiness_process_managerMatch8.5.0.0advanced

ibmbusiness_process_managerMatch8.5.0.0express

ibmbusiness_process_managerMatch8.5.0.0standard

ibmbusiness_process_managerMatch8.5.0.1

ibmbusiness_process_managerMatch8.5.0.1advanced

ibmbusiness_process_managerMatch8.5.0.1express

ibmbusiness_process_managerMatch8.5.0.1standard

ibmbusiness_process_managerMatch8.5.5.0

ibmbusiness_process_managerMatch8.5.5.0advanced

ibmbusiness_process_managerMatch8.5.5.0express

ibmbusiness_process_managerMatch8.5.5.0standard

ibmbusiness_process_managerMatch8.5.6.0

ibmbusiness_process_managerMatch8.5.6.1

ibmbusiness_process_managerMatch8.5.6.2

ibmwebsphere_process_serverMatch7.0

CPENameOperatorVersion
ibm:business_process_manageribm business process managereq7.5.0.0
ibm:business_process_manageribm business process managereq7.5.0.1
ibm:business_process_manageribm business process managereq7.5.1.0
ibm:business_process_manageribm business process managereq7.5.1.1
ibm:business_process_manageribm business process managereq7.5.1.2
ibm:business_process_manageribm business process managereq8.0.0.0
ibm:business_process_manageribm business process managereq8.0.1.0
ibm:business_process_manageribm business process managereq8.0.1.1
ibm:business_process_manageribm business process managereq8.0.1.2
ibm:business_process_manageribm business process managereq8.0.1.3

CPE	Name	Operator	Version
ibm:business_process_manager	ibm business process manager	eq	7.5.0.0
ibm:business_process_manager	ibm business process manager	eq	7.5.0.1
ibm:business_process_manager	ibm business process manager	eq	7.5.1.0
ibm:business_process_manager	ibm business process manager	eq	7.5.1.1
ibm:business_process_manager	ibm business process manager	eq	7.5.1.2
ibm:business_process_manager	ibm business process manager	eq	8.0.0.0
ibm:business_process_manager	ibm business process manager	eq	8.0.1.0
ibm:business_process_manager	ibm business process manager	eq	8.0.1.1
ibm:business_process_manager	ibm business process manager	eq	8.0.1.2
ibm:business_process_manager	ibm business process manager	eq	8.0.1.3

Rows per page:

1-10 of 171

References

www-01.ibm.com/support/docview.wss?uid=swg1JR54760

www.securitytracker.com/id/1034531

www.securitytracker.com/id/1034532

www-01.ibm.com/support/docview.wss?uid=swg21971968

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.5%

JSON

Related for CVE-2015-7441

ibm1 cvelist1 prion1 nvd1